{"id":"CVE-2022-24950","aliases":["EUVD-2022-29703","GHSA-85gw-pchc-4rf3","openSUSE-SU-2022:10185-1","openSUSE-SU-2022:10187-1","openSUSE-SU-2024:12269-1"],"status":"published","title":"Security update for EternalTerminal","description":"A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01338,"percentile":0.71507,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-362"],"published":"2022-08-16T00:00:00Z","modified":"2026-10-28T02:30:32Z","affected":[{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP4","package":"EternalTerminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-bp154.2.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"EternalTerminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-bp154.2.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"EternalTerminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-bp153.2.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"EternalTerminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-bp153.2.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"EternalTerminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-2.1"}]}],"bundled":4}],"products":[{"vendor":"eternal_terminal_project","product":"eternal_terminal"},{"vendor":"jason gauci","product":"eternal terminal"}],"references":[{"url":"https://github.com/MisterTea/EternalTerminal/commit/900348bb8bc96e1c7ba4888ac8480f643c43d3c3","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-85gw-pchc-4rf3","tags":["x_transferred","Exploit","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/02/16/1","tags":["mailing-list","x_transferred","article"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24950.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24950","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OHYD4A5UEJOUE57LY64OW2WI6GAVBOMR/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1202432","tags":["report"]},{"url":"https://bugzilla.suse.com/1202433","tags":["report"]},{"url":"https://bugzilla.suse.com/1202434","tags":["report"]},{"url":"https://bugzilla.suse.com/1202435","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24952","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JH3ZAC25EJQ7SSVMLKBZFLS6IEAXTLZ2/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-24950","description":"A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().","status":"published","published":"2022-08-16T00:00:00Z","modified":"2024-08-03T04:29:01.53Z","cwes":["CWE-362"],"updated_at":"2026-11-02T14:34:34.576287Z"}],"euvd":[{"id":"EUVD-2022-29703","description":"A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().","status":"published","published":"2022-08-16T00:00:00Z","modified":"2024-08-03T04:29:01Z","updated_at":"2026-11-03T03:25:48.512748Z"}],"nvd":[{"id":"CVE-2022-24950","description":"A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().","status":"published","published":"2022-08-16T01:15:12.437Z","modified":"2026-06-17T04:32:50.72Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:07:25.242752Z"}],"osv":[{"id":"CVE-2022-24950","description":"A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().","status":"published","published":"2022-08-16T00:00:00Z","modified":"2026-10-28T02:30:32.392798999Z","cwes":["CWE-362"],"updated_at":"2026-11-02T15:44:24.428403Z"},{"id":"openSUSE-SU-2022:10185-1","title":"Security update for EternalTerminal","description":"This update for EternalTerminal fixes the following issues:\n\nUpdate to 6.2.1:\n\n* CVE-2022-24949: Fixed race condition allows local attacker to hijack IPC socket (boo#1202435)\n* CVE-2022-24950: Fixed privilege escalation to root (boo#1202434)\n* CVE-2022-24951: Fixed DoS triggered remotely by invalid sequence numbers (boo#1202433)\n* CVE-2022-24952: Fixed race condition allows authenticated attacker to hijack other users' SSH authorization socket (boo#1202432)\n","status":"published","published":"2022-11-02T08:52:03Z","modified":"2026-02-04T03:31:08.543168Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2022:10187-1","title":"Security update for EternalTerminal","description":"This update for EternalTerminal fixes the following issues:\n\nUpdate to 6.2.1:\n\n* CVE-2022-24949: Fixed race condition allows local attacker to hijack IPC socket (boo#1202435)\n* CVE-2022-24950: Fixed privilege escalation to root (boo#1202434)\n* CVE-2022-24951: Fixed DoS triggered remotely by invalid sequence numbers (boo#1202433)\n* CVE-2022-24952: Fixed race condition allows authenticated attacker to hijack other users' SSH authorization socket (boo#1202432)\n","status":"published","published":"2022-11-02T08:52:10Z","modified":"2025-05-07T18:13:54.521253Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:12269-1","title":"EternalTerminal-6.2.1-2.1 on GA media","description":"These are all security issues fixed in the EternalTerminal-6.2.1-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:46:21.215678Z","updated_at":"2026-11-02T16:58:35.485255Z"}]}}