-
CVE-2023-45925
- EPSS 0.32%
- Veröffentlicht 27.03.2024 05:15:47
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Herstellermidnight_commander
≫
Produkt
midnight_commander
Default Statusunknown
Version
4.8.29-146-g299d9a2fb
Status
affected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.32% | 0.232 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
http://seclists.org/fulldisclosure/2024/Jan/53
https://midnight-commander.org/ticket/4484
http://packetstormsecurity.com/files/176808/Midnight-Commander-4.8.29-146-g299d9a2fb-Null-Pointer.html