CVE-2023-45925
GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference...
GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).
Exploit likelihood
What each source reports
CVE List No score
GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).
- Record
CVE-2023-45925- Weakness
- CWE-476
- Updated
- 2026-11-02
EUVDEUVD-2023-50188 No score
GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).
- Record
EUVD-2023-50188- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-q22h-9rc9-jpmp No score
GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference...
GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).
- Record
GHSA-q22h-9rc9-jpmp- Weakness
- CWE-476
- Updated
- 2026-11-02
NVD No score
GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).
- Record
CVE-2023-45925- Weakness
- CWE-476
- Updated
- 2026-11-02
OSV No score
GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).
- Record
CVE-2023-45925- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-45925 No score
GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).
- Record
DEBIAN-CVE-2023-45925- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mcDebian:12 |
All versions, plus listed versions 3:4.8.29-23:4.8.30-13:4.8.31-13:4.8.31-1~bpo12+13:4.8.33-13:4.8.33-1.1 |
None known |
mcDebian:13 |
All versions, plus listed versions 3:4.8.33-13:4.8.33-1+deb13u13:4.8.33-1.1 |
None known |
mcDebian:14 |
All versions, plus listed versions 3:4.8.33-13:4.8.33-1.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-45925 is a vulnerability with no CVSS score yet in Midnight Commander Commander, published March 27, 2024. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile.