CVE-2022-24952 - Vulnerability Details - OpenCVE

ReportizFlow

Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Eternal Terminal Project	Eternal Terminal

Configuration 1 [-]

cpe:2.3:a:eternal_terminal_project:eternal_terminal:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://www.openwall.com/lists/oss-security/2023/02/16/1
https://github.com/MisterTea/EternalTerminal/releases/tag/et-v6.2.0
https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-8cw3-6r98-g7cw

History

No history.

MITRE

Status: PUBLISHED

Assigner: facebook

Published: 2022-08-16T00:00:00

Updated: 2024-08-03T04:29:01.137Z

Reserved: 2022-02-11T00:00:00

Link: CVE-2022-24952

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-08-16T01:15:12.797

Modified: 2024-11-21T06:51:26.920

Link: CVE-2022-24952

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:eternal_terminal_project:eternal_terminal:*:*:*:*:*:*:*:*", "matchCriteriaId": "F81EA524-B9EE-48C8-B8BF-8E53D2AAD574", "versionEndExcluding": "6.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket."}, {"lang": "es", "value": "Se presentan varias vulnerabilidades de denegaci\u00f3n de servicio en Eternal Terminal versiones anteriores a 6.2.0, incluyendo un DoS desencadenado remotamente por un n\u00famero de secuencia no v\u00e1lido y un fallo local desencadenado por una entrada no v\u00e1lida enviada directamente al socket IPC."}], "id": "CVE-2022-24952", "lastModified": "2024-11-21T06:51:26.920", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2022-08-16T01:15:12.797", "references": [{"source": "[email protected]", "url": "http://www.openwall.com/lists/oss-security/2023/02/16/1"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://github.com/MisterTea/EternalTerminal/releases/tag/et-v6.2.0"}, {"source": "[email protected]", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-8cw3-6r98-g7cw"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2023/02/16/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/MisterTea/EternalTerminal/releases/tag/et-v6.2.0"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-8cw3-6r98-g7cw"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "[email protected]", "type": "Primary"}]}