3 ms·

UTF-8 handling bug in GNU screen leads to at least DoS reachable remotely

• terom 6y ago
  CVE-2021-26937 assigned. [1] Apparently XTerm is also affected. [2] Reachable via irssi. [3] [1] https://www.openwall.com/lists/oss-security/2021/02/09/8 https://www.openwall.com/lists/oss-security/2021/02/09/8 > Got CVE-2021-26937 assigned for this. [2] https://www.openwall.com/lists/oss-security/2021/02/09/7 https://www.openwall.com/lists/oss-security/2021/02/09/7 > welp, I minimized it a bit and it crashed xterm too. [3] https://www.openwall.com/lists/oss-security/2021/02/09/6 https://www.openwall.com/lists/oss-security/2021/02/09/6 > I managed to reproduce this against screen + irssi. It was a bit tricky to get it triggered but eventually screen did die.
  • Aissen 6y ago
    I was able to reach it via weechat, too: https://twitter.com/Aissn/status/1359227572182278145 https://twitter.com/Aissn/status/1359227572182278145
• deleted 6y ago
  [deleted]
• deleted 6y ago
  [deleted]