« Volver al listado

CVE-2023-45925

Estado: AplazadaSin puntuar—

GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

GNU — Midnight CommanderAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-45925",
  "cveTags": [
    {
      "tags": [
        "disputed"
      ],
      "sourceIdentifier": "cve@mitre.org"
    }
  ],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-45925",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-04-30T17:22:04.382802Z"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:midnight_commander:midnight_commander:*:*:*:*:*:*:*:*"
          ],
          "vendor": "midnight_commander",
          "product": "midnight_commander",
          "versions": [
            {
              "status": "affected",
              "version": "4.8.29-146-g299d9a2fb "
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-03-27T05:15:47.320",
  "references": [
    {
      "url": "http://seclists.org/fulldisclosure/2024/Jan/53",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://midnight-commander.org/ticket/4484",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.com/files/176808/Midnight-Commander-4.8.29-146-g299d9a2fb-Null-Pointer.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2024/Jan/53",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://midnight-commander.org/ticket/4484",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails)."
    },
    {
      "lang": "es",
      "value": "Se descubrió que GNU Midnight Commander 4.8.29-146-g299d9a2fb contiene una desreferencia de puntero NULL a través de la función x_error_handler() en tty/x11conn.c. NOTA: esto está en disputa porque debería categorizarse como un problema de usabilidad (una operación X falla silenciosamente)."
    }
  ],
  "lastModified": "2026-06-17T06:29:48.123",
  "sourceIdentifier": "cve@mitre.org"
}