rpm package
opensuse/EternalTerminal&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/EternalTerminal&distro=openSUSE%20Tumbleweed
Vulnerabilities (6)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-48258 | Med | 5.3 | < 6.2.4-1.1 | 6.2.4-1.1 | Jan 13, 2023 | In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles. | |
| CVE-2022-48257 | Med | 5.3 | < 6.2.4-1.1 | 6.2.4-1.1 | Jan 13, 2023 | In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp. | |
| CVE-2022-24952 | Med | 6.5 | < 6.2.1-2.1 | 6.2.1-2.1 | Aug 16, 2022 | Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket. | |
| CVE-2022-24951 | Hig | 7.0 | < 6.2.1-2.1 | 6.2.1-2.1 | Aug 16, 2022 | A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future. | |
| CVE-2022-24950 | Hig | 7.5 | < 6.2.1-2.1 | 6.2.1-2.1 | Aug 16, 2022 | A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId(). | |
| CVE-2022-24949 | Hig | 7.5 | < 6.2.1-2.1 | 6.2.1-2.1 | Aug 16, 2022 | A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen(). |
- affected < 6.2.4-1.1fixed 6.2.4-1.1
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.
- affected < 6.2.4-1.1fixed 6.2.4-1.1
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.
- affected < 6.2.1-2.1fixed 6.2.1-2.1
Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket.
- affected < 6.2.1-2.1fixed 6.2.1-2.1
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future.
- affected < 6.2.1-2.1fixed 6.2.1-2.1
A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().
- affected < 6.2.1-2.1fixed 6.2.1-2.1
A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen().