CVE-2023-45925

NameCVE-2023-45925
DescriptionGNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
mc (PTS)buster3:4.8.22-1vulnerable
bullseye3:4.8.26-1.1vulnerable
bookworm3:4.8.29-2vulnerable
sid, trixie3:4.8.30-1vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
mcsource(unstable)(unfixed)unimportant

Notes

https://midnight-commander.org/ticket/4484
Negligible security impact, crash in CLI tool

Search for package or bug name: Reporting problems