openSUSE-SU-2022:10185-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10185-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/openSUSE-SU-2022:10185-1
- Related
- Published
- 2022-11-02T08:52:03Z
- Modified
- 2022-11-02T08:52:03Z
- Summary
- Security update for EternalTerminal
- Details
-
This update for EternalTerminal fixes the following issues:
Update to 6.2.1:
- CVE-2022-24949: Fixed race condition allows local attacker to hijack IPC socket (boo#1202435)
- CVE-2022-24950: Fixed privilege escalation to root (boo#1202434)
- CVE-2022-24951: Fixed DoS triggered remotely by invalid sequence numbers (boo#1202433)
- CVE-2022-24952: Fixed race condition allows authenticated attacker to hijack other users' SSH authorization socket (boo#1202432)
- References
-
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OHYD4A5UEJOUE57LY64OW2WI6GAVBOMR/
- https://bugzilla.suse.com/1202432
- https://bugzilla.suse.com/1202433
- https://bugzilla.suse.com/1202434
- https://bugzilla.suse.com/1202435
- https://www.suse.com/security/cve/CVE-2022-24949
- https://www.suse.com/security/cve/CVE-2022-24950
- https://www.suse.com/security/cve/CVE-2022-24951
- https://www.suse.com/security/cve/CVE-2022-24952
Affected packages
SUSE:Package Hub 15 SP4 / EternalTerminal
Package
- Name
- EternalTerminal
- Purl
- pkg:rpm/suse/EternalTerminal&distro=SUSE%20Package%20Hub%2015%20SP4