admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add EternalTerminal CVEs 2022-249[49,52]

Browse Source
This commit is contained in:
Vlad Ionescu 2022-08-15 16:30:06 -07:00
parent 22cb06743b
commit e97ee29598
No known key found for this signature in database
GPG Key ID: 60BF5C46B88C15CF
4 changed files with 228 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

57
2022/24xxx/CVE-2022-24949.json Normal file
View File

@ -0,0 +1,57 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve-assign@fb.com",
"DATE_ASSIGNED": "2022-02-10",
"ID": "CVE-2022-24949",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": " Jason Gauci",
"product": {
"product_data": [
{
"product_name": "Eternal Terminal",
"version": {
"version_data": [
{
"version_affected": "<",
"version_value": "6.2.0"
}
]
}
}
]
}
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen()."
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://github.com/MisterTea/EternalTerminal/commit/900348bb8bc96e1c7ba4888ac8480f643c43d3c3",
"url": "https://github.com/MisterTea/EternalTerminal/commit/900348bb8bc96e1c7ba4888ac8480f643c43d3c3"
},
{
"refsource": "MISC",
"name": "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-hxg8-4r3q-p9rv",
"url": "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-hxg8-4r3q-p9rv"
}
]
}
}

57
2022/24xxx/CVE-2022-24950.json Normal file
View File

@ -0,0 +1,57 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve-assign@fb.com",
"DATE_ASSIGNED": "2022-02-10",
"ID": "CVE-2022-24950",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": " Jason Gauci",
"product": {
"product_data": [
{
"product_name": "Eternal Terminal",
"version": {
"version_data": [
{
"version_affected": "<",
"version_value": "6.2.0"
}
]
}
}
]
}
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId()."
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://github.com/MisterTea/EternalTerminal/commit/900348bb8bc96e1c7ba4888ac8480f643c43d3c3",
"url": "https://github.com/MisterTea/EternalTerminal/commit/900348bb8bc96e1c7ba4888ac8480f643c43d3c3"
},
{
"refsource": "MISC",
"name": "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-85gw-pchc-4rf3",
"url": "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-85gw-pchc-4rf3"
}
]
}
}

57
2022/24xxx/CVE-2022-24951.json Normal file
View File

@ -0,0 +1,57 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve-assign@fb.com",
"DATE_ASSIGNED": "2022-02-10",
"ID": "CVE-2022-24951",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": " Jason Gauci",
"product": {
"product_data": [
{
"product_name": "Eternal Terminal",
"version": {
"version_data": [
{
"version_affected": "<",
"version_value": "6.2.0"
}
]
}
}
]
}
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future."
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-546v-59j5-g95q",
"url": "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-546v-59j5-g95q"
},
{
"refsource": "CONFIRM",
"name": "https://github.com/MisterTea/EternalTerminal/releases/tag/et-v6.2.0",
"url": "https://github.com/MisterTea/EternalTerminal/releases/tag/et-v6.2.0"
}
]
}
}

57
2022/24xxx/CVE-2022-24952.json Normal file
View File

@ -0,0 +1,57 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve-assign@fb.com",
"DATE_ASSIGNED": "2022-02-10",
"ID": "CVE-2022-24952",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": " Jason Gauci",
"product": {
"product_data": [
{
"product_name": "Eternal Terminal",
"version": {
"version_data": [
{
"version_affected": "<",
"version_value": "6.2.0"
}
]
}
}
]
}
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket."
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-8cw3-6r98-g7cw",
"url": "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-8cw3-6r98-g7cw"
},
{
"refsource": "CONFIRM",
"name": "https://github.com/MisterTea/EternalTerminal/releases/tag/et-v6.2.0",
"url": "https://github.com/MisterTea/EternalTerminal/releases/tag/et-v6.2.0"
}
]
}
}