Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 534
Alerts This Week
Warning Icon 1 534

Ubuntu 14.04 ESM: USN-4747-2 Critical GNU Screen DoS Risk

ubuntu
Calendar Grey February 24, 2021
Dist Ubuntu Esm H88
The latest Ubuntu Security Notice USN-4748-1 highlights a vulnerability in Apache Tomcat that can cause unauthorized access or service disruption via crafted requests
GNU Screen could be made to crash or run programs if it processed specially crafted character sequences.

Summary

GNU Screen could be made to crash or run programs if it processed specially

crafted character sequences.

Software Description:

- screen: terminal multiplexer with VT100/ANSI terminal emulation

Details:

USN-4747-1 fixed a vulnerability in screen. This update provides

the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

Felix Weinmann discovered that GNU Screen incorrectly handled certain

character sequences. A remote attacker could use this issue to cause GNU

Screen to crash, resulting in a denial of service, or possibly execute

arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service critical remote attack Ubuntu remote execution screen ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  screen                          4.1.0~20120320gitdb59704-9ubuntu0.1~esm2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4747-2

https://ubuntu.com/security/notices/USN-4747-1

CVE-2021-26937

Severity
critical
Lowest
Low
Medium
High
Critical

February 24, 2021

Topics%20covered

Topics Covered

security advisory denial of service critical remote attack Ubuntu remote execution screen ubuntu

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.