CVE-2023-24626

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-04-08 · updated 2026-06-17
Weakness: CWE-732

Description

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Affected products

GNU Screen: through 4.9.0

References

https://git.savannah.gnu.org/cgit/screen.git/patch/?id=e9ad41bfedb4537a6f0de20f00b27c7739f168f7
https://savannah.gnu.org/bugs/?63195
https://www.exploit-db.com/exploits/51252
https://git.savannah.gnu.org/cgit/screen.git/patch/?id=e9ad41bfedb4537a6f0de20f00b27c7739f168f7
https://savannah.gnu.org/bugs/?63195
https://security.netapp.com/advisory/ntap-20250509-0003/
https://www.exploit-db.com/exploits/51252
https://www.exploit-db.com/exploits/51252

Get alerted when CVE-2023-24626 or the next vulnerability affects your stack