openSUSE 15 Security Update : EternalTerminal (openSUSE-SU-2022:10187-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10187-1 advisory. - A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition,...

Security update for EternalTerminal (important)

openSUSE Security Update: Security update for EternalTerminal Announcement ID: openSUSE-SU-2022:10185-1 Rating: important References: 1202432 1202433 1202434 1202435 Cross-References: CVE-2022-24949 CVE-2022-24950 CVE-2022-24951 CVE-2022-24952 CVSS scores: CVE-2022-24949 NVD : 7.5...

CVE-2022-24949

EternalTerminal (pre-6.2.0) has a local privilege-escalation bug in PipeSocketHandler::listen() caused by a race condition, a buffer overflow, and a logic bug. CVE-2022-24949 is addressed in EternalTerminal 6.2.1, per OSV/OpenSUSE fixes; update to 6.2.1 to remediate. Other CVEs (24950–24952) are ...

CVE-2022-24949

A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen...