CVE-2025-46802 — Temporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen

Affected: SUSE Linux Enterprise Micro 5.3, SUSE Linux Enterprise Micro 5.4, SUSE Linux Enterprise Micro 5.5, SUSE Linux Enterprise Module for Basesystem 15 SP6, SUSE Linux Enterprise Server 15 SP6, SUSE Linux Enterprise Desktop 15 SP6, SUSE Linux Enterprise Server for SAP Applications 15 SP6, SUSE Linux Enterprise High Performance Computing 15 SP6

For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.

USN-7978-1 — screen vulnerabilities

Affected: Ubuntu:22.04:LTS: screen, Ubuntu:24.04:LTS: screen

It was discovered that GNU Screen incorrectly handled signals when setuid or setgid privileges were being used, which is not the default in Ubuntu. A local attacker could use this issue to send privileged signals, possibly leading to a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-24626)

It was discovered that GNU Screen incorrectly handled PTY permissions. A local attacker could possibly use this issue to connect to an unauthorized screen session. (CVE-2025-46802)

It was discovered that GNU Screen incorrectly handled file access when setuid privileges were being used, which is not the default in Ubuntu. A local attacker could use this issue to deduce information about certain file paths. (CVE-2025-46804)

It was discovered that GNU Screen incorrectly handled signals when setuid privileges were being used, which is not the default in Ubuntu. A local attacker could use this issue to send privileged signals, possibly leading to a denial of service. (CVE-2025-46805)

Most recent entries from all

CVE-2025-46802 — Temporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen

USN-7978-1 — screen vulnerabilities