CVE-2020-9366

A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact.

• CWE-787

• http://www.openwall.com/lists/oss-security/2020/02/25/1Mailing List, Third Party Advisory
• https://lists.gnu.org/archive/html/screen-devel/2020-02/msg00007.htmlMailing List, Patch, Release Notes, Vendor Advisory
• https://security.gentoo.org/glsa/202003-62Third Party Advisory
• https://www.openwall.com/lists/oss-security/2020/02/06/3Mailing List, Patch, Release Notes
• http://www.openwall.com/lists/oss-security/2020/02/25/1Mailing List, Third Party Advisory
• https://lists.gnu.org/archive/html/screen-devel/2020-02/msg00007.htmlMailing List, Patch, Release Notes, Vendor Advisory
• https://security.gentoo.org/glsa/202003-62Third Party Advisory
• https://www.openwall.com/lists/oss-security/2020/02/06/3Mailing List, Patch, Release Notes

Published

Feb 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9359KDE Okular before 1.10.0 allows code execution via an action…5.3
• CVE-2020-9361CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows…5.5
• CVE-2020-9362The Quick Heal AV parsing engine (November 2019) allows viru…7.8
• CVE-2020-9363The Sophos AV parsing engine before 2020-01-14 allows virus-…7.8
• CVE-2020-9364An issue was discovered in helpers/mailer.php in the Creativ…5.3
• CVE-2020-9365An issue was discovered in Pure-FTPd 1.0.49. An out-of-bound…7.5
• CVE-2020-9367The MPS Agent in Zoho ManageEngine Desktop Central MSP build…7.8
• CVE-2020-9368The Module Olea Gift On Order module through 5.0.8 for Prest…7.5
• CVE-2020-9369Sympa 6.2.38 through 6.2.52 allows remote attackers to cause…7.5
• CVE-2020-9370HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijackin…9.1
• CVE-2020-9371Stored XSS exists in the Appointment Booking Calendar plugin…4.8
• CVE-2020-9372The Appointment Booking Calendar plugin before 1.3.35 for Wo…7.8