GCVE - cpe:2.3:a:jason_gauci:eternal_terminal:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jason_gauci:eternal_terminal:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Jason Gauci (`9b34a14c-2d7d-5812-8083-6869f90487d6`)
Product	Eternal Terminal (`a433b678-50ce-5f71-a1ee-94be452be7ce`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-24952`	vulnerable	2026-06-08 05:41:44.982611	Details available Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket. Published: 2022-08-16T00:00:00.000Z Updated: 2024-08-03T04:29:01.137Z Open on db.gcve.eu Reference links https://github.com/MisterTea/EternalTerminal/releases/tag/et-v6.2.0 https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-8cw3-6r98-g7cw http://www.openwall.com/lists/oss-security/2023/02/16/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24951`	vulnerable	2026-06-08 05:41:44.982324	Details available A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future. Published: 2022-08-16T00:00:00.000Z Updated: 2024-08-03T04:29:01.505Z Open on db.gcve.eu Reference links https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-546v-59j5-g95q https://github.com/MisterTea/EternalTerminal/releases/tag/et-v6.2.0 http://www.openwall.com/lists/oss-security/2023/02/16/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24950`	vulnerable	2026-06-08 05:41:44.982005	Details available A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId(). Published: 2022-08-16T00:00:00.000Z Updated: 2024-08-03T04:29:01.530Z Open on db.gcve.eu Reference links https://github.com/MisterTea/EternalTerminal/commit/900348bb8bc96e1c7ba4888ac8480f643c43d3c3 https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-85gw-pchc-4rf3 http://www.openwall.com/lists/oss-security/2023/02/16/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24949`	vulnerable	2026-06-08 05:41:44.980630	Details available A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen(). Published: 2022-08-16T00:30:36.000Z Updated: 2024-08-03T04:29:01.780Z Open on db.gcve.eu Reference links https://github.com/MisterTea/EternalTerminal/commit/900348bb8bc96e1c7ba4888ac8480f643c43d3c3 https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-hxg8-4r3q-p9rv	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Eternal Terminal

Notes

PURL mappings

Vulnerability references

Contribute