PatchTheCVEeternal terminal vulnerabilities and fixes
Recent CVEs affecting eternal terminal, with upgrade or downgrade steps. 7 tracked.
Also searched as: eternalterminal.
eternal terminal has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2023-02-16. Highest priority: CVE-2022-24950 (score 49/100).
- CVE-2023-23558 MEDIUM 6.3 DOWNGRADE In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp
- CVE-2022-48258 MEDIUM 5.3 DOWNGRADE In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.
- CVE-2022-48257 MEDIUM 5.3 DOWNGRADE In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.
- CVE-2022-24952 MEDIUM 6.5 UPGRADE Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS tr
- CVE-2022-24951 HIGH 7.0 UPGRADE A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Ete
- CVE-2022-24950 HIGH 7.5 UPGRADE A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hi
- CVE-2022-24949 HIGH 7.5 UPGRADE A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0
FAQ
How do I fix eternal terminal vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eternal terminal being exploited right now?
None of the tracked eternal terminal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eternal terminal CVE should I patch first?
CVE-2022-24950 currently ranks highest (49/100): A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hi.