high7.5
CVE-2022-24949
A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0.
Impact
A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen().
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eternal Terminal Project | Eternal Terminal | before 6.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/MisterTea/EternalTerminal/commit/900348bb8bc96e1c7ba4888ac8480f643c43d3c3
- https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-hxg8-4r3q-p9rv
- https://github.com/MisterTea/EternalTerminal/commit/900348bb8bc96e1c7ba4888ac8480f643c43d3c3
- https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-hxg8-4r3q-p9rv