Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-5618

25
FAUCET Score

CVE-2017-5618 is a high-severity vulnerability affecting GNU screen versions prior to 4.5.1, allowing local users to achieve root privileges. This flaw stems from improper logfile permission checks, enabling attackers to modify arbitrary files. With a CVSS score of 7.8, it represents a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. While no public exploits or active exploitation have been observed, and community discussion is minimal, the potential for privilege escalation makes patching critical.

Impacted Technologies

VendorProductVersion(s)CPE
<= 4.5.0CPE matchmatch criteria
cpe:2.3:a:gnu:screen:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

7.8HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
1.09%
Probability of exploitation in next 30 days
EPSS Percentile
61.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0109 is in the 93rd percentile among its peer group of 16,994 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2017-5618Moderate

screen: Privilege escalation via unsafe logfile handling

Jan 24, 2017

References

git.savannah.gnu.org / cgit/screen.git/patch
PatchThird Party Advisory
git.savannah.gnu.org / cgit/screen.git/tree/src/ChangeLog
Release NotesThird Party Advisory
savannah.gnu.org / bugs
Third Party Advisory
lists.gnu.org / archive/html/screen-devel/2017-01/msg00025.html
ExploitThird Party Advisory
openwall.com / lists/oss-security/2017/01/29/3
ExploitMailing ListThird Party Advisory
securityfocus.com / bid/95873
Third Party AdvisoryVDB Entry