CVE catalog

CVE-2009-1214

screen: CVE-2009-1214

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.34% · Oct 27, 2026

GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianscreensid5.0.2-1fixed
Debianscreenforky5.0.2-1fixed
Debianscreentrixie4.9.1-3fixed
Debianscreenbookworm4.9.0-4fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianscreensourcesid4.0.3-13not yet assignedNot reported[521123]
Debianscreensourceforky4.0.3-13not yet assignedNot reported[521123]
Debianscreensourcetrixie4.0.3-13not yet assignedNot reported[521123]
Debianscreensourcebookworm4.0.3-13not yet assignedNot reported[521123]

[Debian bug #521123]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [screen]Fixed
    Details (2)

    • 4.9.0-4 · amd64 · bookworm

      Fixed · Fixed: 4.0.3-13

      dsa · screen · debian · bookworm; dsa · screen · debian · 12

    • 4.9.0-4 · arm64 · bookworm

      Fixed · Fixed: 4.0.3-13

      dsa · screen · debian · bookworm; dsa · screen · debian · 12

[Debian 13 (Trixie)]

  • [screen]Fixed
    Details (2)

    • 4.9.1-3 · amd64 · trixie

      Fixed · Fixed: 4.0.3-13

      dsa · screen · debian · 13

    • 4.9.1-3 · arm64 · trixie

      Fixed · Fixed: 4.0.3-13

      dsa · screen · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]