Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/05/26 3:18 p.m.24 views

CVE-2025-23395 Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set

Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path. This allows unprivileged users to create files in arbitrary locations with root ownership, the invoking user's real group ownership and file mode 0644. All data written to the...

7.8CVSS0.00201EPSS
SaveExploits0References2
Rows per page
Query Builder