Nixpkgs Security Tracker

Login with GitHub

Suggestion detail

Untriaged
(browse all)
Permalink CVE-2025-23395
created 4 months, 3 weeks ago
Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set

Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path. This allows unprivileged users to create files in arbitrary locations with `root` ownership, the invoking user's (real) group ownership and file mode 0644. All data written to the Screen PTY will be logged into this file, allowing to escalate to root privileges

Affected products

screen
  • =<5.0.0

Matching in nixpkgs

pkgs.screen

Window manager that multiplexes a physical terminal

  • nixos-unstable -

pkgs.yascreen

Curses replacement for daemons and embedded apps

  • nixos-unstable -

pkgs.screenkey

Screencast tool to display your keys inspired by Screenflick

  • nixos-unstable -

pkgs.screentest

Simple screen testing tool

  • nixos-unstable -

pkgs.gscreenshot

Screenshot frontend (CLI and GUI) for a variety of screenshot backends

  • nixos-unstable -

pkgs.screen-pipe

Personalized AI powered by what you've seen, said, or heard

  • nixos-unstable -

pkgs.screenfetch

Fetches system/theme information in terminal for Linux desktop screenshots

  • nixos-unstable -

pkgs.screenconfig

Automatic configuration of connected screens/monitors

  • nixos-unstable -

pkgs.screenly-cli

Tools for managing digital signs and screens at scale

  • nixos-unstable -

pkgs.wl-screenrec

High performance wlroots screen recording, featuring hardware encoding

  • nixos-unstable -

pkgs.vokoscreen-ng

User friendly Open Source screencaster for Linux and Windows

  • nixos-unstable -

pkgs.gh-screensaver

gh extension with animated terminal screensavers

  • nixos-unstable -

pkgs.screen-message

Displays a short text fullscreen in an X11 window

  • nixos-unstable -

pkgs.rofi-screenshot

Use rofi to perform various types of screenshots and screen captures

pkgs.betterlockscreen

Fast and sweet looking lockscreen for linux systems with effects

  • nixos-unstable -

pkgs.gnome-screenshot

Utility used in the GNOME desktop environment for taking screenshots

  • nixos-unstable -

pkgs.budgie-screensaver

Fork of old GNOME Screensaver for purposes of providing an authentication prompt on wake

  • nixos-unstable -

pkgs.gpu-screen-recorder

Screen recorder that has minimal impact on system performance by recording a window using the GPU only

  • nixos-unstable -

pkgs.mpd-touch-screen-gui

Small MPD client that let's you view covers and has controls suitable for small touchscreens

pkgs.gnomeExtensions.screen-rotate

Enable screen rotation regardless of touch mode. Fork of Screen Autorotate by Kosmospredanie.

  • nixos-unstable -
    • nixpkgs-unstable 25

pkgs.gnomeExtensions.screenshot-tool

Conveniently create, copy, store and upload screenshots. Please log out and log in again after updating.

  • nixos-unstable -
    • nixpkgs-unstable 76

pkgs.gnomeExtensions.hide-screen-sharing

Hide Screen Sharing. Useful for software KVMs that always show screen sharing like Desk Flow, Input-Leap, Barrier, etc...

  • nixos-unstable -
    • nixpkgs-unstable 1

pkgs.gnomeExtensions.peek-top-bar-on-fullscreen

Show the top bar (panel) on demand while having full screen content on (like a YouTube video). Just hover the mouse cursor to the top of the screen, and the panel will show up. This way, you can quickly check the time, or swich some toggles. This is similar to what macOS offers for full screen apps.

  • nixos-unstable -
    • nixpkgs-unstable 17

pkgs.gnomeExtensions.disable-unredirect-fullscreen-windows

Disables unredirect fullscreen windows in gnome-shell to workaround a bug when clicking on full screen windows goes through to windows underneath. This also happens to fix screen tearing in full-screen windows.

  • nixos-unstable -
    • nixpkgs-unstable 12

Package maintainers