Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of service (crash or hang) via certain UTF8 sequences.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Screen | — | Apply OS X security update 2007-005 | Dec 16, 2011 | Oct 24, 2006 |
| Debian | — | Upgrade screen | Jul 30, 2024 | Oct 24, 2006 |
| Freebsd | — | Upgrade screen | Dec 10, 2025 | Oct 29, 2006 |
| Gentoo Linux | — | Upgrade app-misc/screen. | Oct 30, 2017 | Oct 24, 2006 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 23, 2006 |
| Suse | — | Upgrade screen | Dec 12, 2013 | Oct 24, 2006 |
| Ubuntu | — | Upgrade screen | Nov 8, 2024 | Oct 24, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub