Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 01:44:42 +0000 CVE-2025-23395 — Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set https://vulnerability.circl.lu/vuln/cve-2025-23395 <p><strong>Affected:</strong> screen</p> <p>Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path. This allows unprivileged users to create files in arbitrary locations with `root` ownership, the invoking user&#39;s (real) group ownership and file mode 0644. All data written to the Screen PTY will be logged into this file, allowing to escalate to root privileges</p> <p><strong>Affected:</strong> screen</p> <p>Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path. This allows unprivileged users to create files in arbitrary locations with `root` ownership, the invoking user&#39;s (real) group ownership and file mode 0644. All data written to the Screen PTY will be logged into this file, allowing to escalate to root privileges</p> https://vulnerability.circl.lu/vuln/cve-2025-23395