Medium severity6.5NVD Advisory· Published Apr 8, 2023· Updated Jun 17, 2026

CVE-2023-24626

Description

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/Screen2 versions
cpe:2.3:a:gnu:screen:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnu:screen:*:*:*:*:*:*:*:*range: <=4.9.0
- (no CPE)range: <=4.9.0
GNU Screen/GNU Screendescription
osv-coords
pkg:rpm/opensuse/screen&distro=openSUSE%20Tumbleweed
Range: < 4.9.1-1.1

Patches

Vulnerability mechanics

References

git.savannah.gnu.org/cgit/screen.git/patch/nvdMailing ListPatch
www.exploit-db.com/exploits/51252nvdThird Party AdvisoryVDB Entry
security.netapp.com/advisory/ntap-20250509-0003/nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000