CVE-2025-46803: Screen creates by default world-writable PTYs
The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-46803?
CVE-2025-46803 has a medium severity rating due to its potential to allow unauthorized write access to pseudo terminals.
What is the impact of CVE-2025-46803?
CVE-2025-46803 allows unauthorized users to write to Screen pseudo terminals, which could lead to data leakage or manipulation.
How do I mitigate CVE-2025-46803?
To mitigate CVE-2025-46803, you should change the permissions of pseudo terminals from 0622 back to a more restrictive mode like 0620.
Which software is affected by CVE-2025-46803?
CVE-2025-46803 affects the GNU Screen application, particularly in its handling of pseudo terminal permissions.
Is there a patch available for CVE-2025-46803?
Yes, a patch for CVE-2025-46803 should be available in the updates for GNU Screen, so ensure your software is up to date.