Eternal Terminal Project Eternal Terminal — known CVE vulnerabilities

Every CVE whose affected-product data names Eternal Terminal Project Eternal Terminal, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2022-24949 — CVSS 7.5 (high): A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition…
• CVE-2022-24950 — CVSS 7.5 (high): A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH…
• CVE-2022-24951 — CVSS 7.0 (high): A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket…
• CVE-2022-24952 — CVSS 6.5 (medium): Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an…
• CVE-2023-23558 — CVSS 6.3 (medium): In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver…
• CVE-2022-48257 — CVSS 5.3 (medium): In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.
• CVE-2022-48258 — CVSS 5.3 (medium): In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.