CVE-2022-24951 Race condition in Eternal Terminal
A local attacker can hijack the IPC socket via a race condition to intercept future client connections in Eternal Terminal.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-24951?
CVE-2022-24951 is a high-severity vulnerability in Jason Gauci Eternal Terminal, published on 16 Aug 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future.
Weakness: CWE-362
Which versions are affected by CVE-2022-24951?
It affects 1 product.
Products include Eternal Terminal Project Eternal Terminal.
How do I fix CVE-2022-24951?
Upgrade to a fixed version.
Is CVE-2022-24951 being exploited?
There is no known exploitation of CVE-2022-24951 in the wild and no public exploit code.
Other vulnerabilities in Jason Gauci Eternal Terminal
- CVE-2022-24949 Privilege escalation in Eternal Terminal
- CVE-2022-24950 Race condition in Eternal Terminal
- CVE-2022-24952 Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid
- CVE-2023-23558 Path traversal in n/a
- CVE-2022-48257 Information disclosure in n/a
Sources
Also known as GHSA-546v-59j5-g95q.