CVE-2022-24952 - Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket

Back Back to CVE browser

MEDIUM

Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket

Published Aug 16, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 1.57%

Description

Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket.

Affected products

Vendor Jason Gauci Product Eternal Terminal Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <6.2.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jason Gauci

Eternal Terminal

n/a

Version	Status	Constraints
unspecified	affected	<6.2.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

http://www.openwall.com/lists/oss-security/2023/02/16/1
mailing-list
https://github.com/MisterTea/EternalTerminal/releases/tag/et-v6.2.0
Third Party Advisory
https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-8cw3-6r98-g7cw
ExploitThird Party Advisory

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2023/02/16/1		mailing-list
https://github.com/MisterTea/EternalTerminal/releases/tag/et-v6.2.0		Third Party Advisory
https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-8cw3-6r98-g7cw		ExploitThird Party Advisory