Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU Screen Braille模块本地缓冲区溢出漏洞
Vulnerability Description
Screen是一款免费开放源代码的终端管理软件,由Free Software Foundation分发和维护,可使用在多种Unix和Linux操作系统下。 Screen中的braille模块对边界检查不够充分正确,可导致产生缓冲溢出。 本地攻击者可以提交超长的字符串数据给screen程序,由于braille模块对边界检查处理不当,可导致缓冲区溢出,由于screen以setuid root的属性安装,成功利用可使攻击者以root的权限执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A