Eternal Terminal Project Eternal Terminal
7 CVEs affecting Eternal Terminal Project Eternal Terminal. Latest disclosed: 2023-02-16. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-24950 | High | 7.5 | 2022-08-16 | A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabl… |
CVE-2022-24949 | High | 7.5 | 2022-08-16 | A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logi… |
CVE-2022-24951 | High | 7.0 | 2022-08-16 | A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Et… |
CVE-2022-24952 | Medium | 6.5 | 2022-08-16 | Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number an… |
CVE-2023-23558 | Medium | 6.3 | 2023-02-16 | In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver with mode 0777 befo… |
CVE-2022-48258 | Medium | 5.3 | 2023-01-13 | In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles. |
CVE-2022-48257 | Medium | 5.3 | 2023-01-13 | In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp. |