Aggregates CVE and security vulnerability intelligence across all eternal_terminal_project-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk path handling, vendor risk buffer overflow, and vendor risk input validation and related problems; some flaws may lead to vendor impact application crash.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2023-23558 | In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver with mode 0777 before the etserver process is started. The attacker can choose to read sensitive information from that file, or modify the information in that file. | [email protected] | 6.3 | 0.31% | 2023-02-16 | 2026-06-17 |
| CVE-2022-48258 | In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles. | [email protected] | 5.3 | 1.07% | 2023-01-12 | 2026-06-17 |
| CVE-2022-48257 | In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp. | [email protected] | 5.3 | 0.88% | 2023-01-12 | 2026-06-17 |
| CVE-2022-24952 | Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket. | [email protected] | 6.5 | 1.25% | 2022-08-15 | 2026-06-17 |
| CVE-2022-24951 | A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future. | [email protected] | 7.0 | 0.27% | 2022-08-15 | 2026-06-17 |
| CVE-2022-24950 | A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId(). | [email protected] | 7.5 | 0.98% | 2022-08-15 | 2026-06-17 |
| CVE-2022-24949 | A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen(). | [email protected] | 7.5 | 0.85% | 2022-08-15 | 2026-06-17 |