CVE:CVE-2021-26937
CNNVD:CNNVD-202102-725
GNU Screen是美国GNU社区的一个应用软件。提供一个物理终端上获得多个虚拟终端的效果。
GNU Screen 中的encoding.c文件存在参数注入漏洞，该漏洞源于未对输入的UTF-8字符安全处理，远程攻击者可通过特殊的UTF-8字符导致产品引发拒绝服务。
solution:Upgrade gnu screen to a higher version than 4.8.0,and avoid the version (,4.8.0]; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33