[SECURITY] [DLA 305-1] screen security update

2015-09-0521:47:10

lists.debian.org

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

Low

EPSS

0.061

Percentile

93.6%

JSON

Package : screen
Version : 4.0.3-14+deb6u1
CVE ID : CVE-2015-6806
Debian Bug :797624

A vulnerability was found in screen causing a stack overflow which results

in crashing the screen server process, resulting in denial of service.

See DSA-3352-1 for information on other Debian releases.

We recommend that you upgrade your screen packages.

OSVersionArchitecturePackageVersionFilename
Debian6allscreen< 4.0.3-14+deb6u1screen_4.0.3-14+deb6u1_all.deb
Debian8armelscreen< 4.2.1-3+deb8u1screen_4.2.1-3+deb8u1_armel.deb
Debian8armhfscreen< 4.2.1-3+deb8u1screen_4.2.1-3+deb8u1_armhf.deb
Debian8mipselscreen< 4.2.1-3+deb8u1screen_4.2.1-3+deb8u1_mipsel.deb
Debian6i386screen< 4.0.3-14+deb6u1screen_4.0.3-14+deb6u1_i386.deb
Debian7i386screen< 4.1.0~20120320gitdb59704-7+deb7u1screen_4.1.0~20120320gitdb59704-7+deb7u1_i386.deb
Debian6amd64screen< 4.0.3-14+deb6u1screen_4.0.3-14+deb6u1_amd64.deb
Debian7amd64screen< 4.1.0~20120320gitdb59704-7+deb7u1screen_4.1.0~20120320gitdb59704-7+deb7u1_amd64.deb
Debian7armelscreen< 4.1.0~20120320gitdb59704-7+deb7u1screen_4.1.0~20120320gitdb59704-7+deb7u1_armel.deb
Debian8amd64screen< 4.2.1-3+deb8u1screen_4.2.1-3+deb8u1_amd64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	all	screen	< 4.0.3-14+deb6u1	screen_4.0.3-14+deb6u1_all.deb
Debian	8	armel	screen	< 4.2.1-3+deb8u1	screen_4.2.1-3+deb8u1_armel.deb
Debian	8	armhf	screen	< 4.2.1-3+deb8u1	screen_4.2.1-3+deb8u1_armhf.deb
Debian	8	mipsel	screen	< 4.2.1-3+deb8u1	screen_4.2.1-3+deb8u1_mipsel.deb
Debian	6	i386	screen	< 4.0.3-14+deb6u1	screen_4.0.3-14+deb6u1_i386.deb
Debian	7	i386	screen	< 4.1.0~20120320gitdb59704-7+deb7u1	screen_4.1.0~20120320gitdb59704-7+deb7u1_i386.deb
Debian	6	amd64	screen	< 4.0.3-14+deb6u1	screen_4.0.3-14+deb6u1_amd64.deb
Debian	7	amd64	screen	< 4.1.0~20120320gitdb59704-7+deb7u1	screen_4.1.0~20120320gitdb59704-7+deb7u1_amd64.deb
Debian	7	armel	screen	< 4.1.0~20120320gitdb59704-7+deb7u1	screen_4.1.0~20120320gitdb59704-7+deb7u1_armel.deb
Debian	8	amd64	screen	< 4.2.1-3+deb8u1	screen_4.2.1-3+deb8u1_amd64.deb