2015-09-08
ALT-BU-2015-2629-1
Branch sisyphus update bulletin.
Closed vulnerabilities
Published: 2015-09-28
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2015-6806
The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value.
Severity: MEDIUM (5.0)
References:
- http://git.savannah.gnu.org/cgit/screen.git/commit/?id=b7484c224738247b510ed0d268cd577076958f1b
- http://git.savannah.gnu.org/cgit/screen.git/commit/?id=b7484c224738247b510ed0d268cd577076958f1b
- openSUSE-SU-2019:1485
- openSUSE-SU-2019:1485
- DSA-3352
- DSA-3352
- [oss-security] 20150901 CVE request: screen stack overflow (deep recursion)
- [oss-security] 20150901 CVE request: screen stack overflow (deep recursion)
- [oss-security] 20150904 Re: CVE request: screen stack overflow (deep recursion)
- [oss-security] 20150904 Re: CVE request: screen stack overflow (deep recursion)
- [oss-security] 20150903 AW: Re: CVE request: screen stack overflow (deep recursion)
- [oss-security] 20150903 AW: Re: CVE request: screen stack overflow (deep recursion)
- https://savannah.gnu.org/bugs/?45713
- https://savannah.gnu.org/bugs/?45713
- USN-3996-1
- USN-3996-1