CVE-2022-24951
HIGHEternal Terminal < 6.2.0 - Race Condition via IPC Socket Hijacking
Title source: llmDescription
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future.
References (3)
Core 3
Core References
Third Party Advisory
https://github.com/MisterTea/EternalTerminal/releases/tag/et-v6.2.0
Exploit, Patch
https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-546v-59j5-g95q
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2023/02/16/1
Scores
CVSS v3
7.0
EPSS
0.0027
EPSS Percentile
18.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-362
Status
published
Products (1)
eternal_terminal_project/eternal_terminal
< 6.2.0
Published
Aug 16, 2022
Tracked Since
Feb 18, 2026