{"id":"CVE-2023-29132","aliases":["DEBIAN-CVE-2023-29132","EUVD-2023-32735","GHSA-rx4q-gwv4-r27p","MGASA-2024-0063","openSUSE-SU-2024:12848-1"],"status":"published","title":"Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special...","description":"Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00808,"percentile":0.57301,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2023-04-14T00:00:00Z","modified":"2026-10-28T02:30:43Z","fixes":[{"ecosystem":"Debian:12","package":"irssi","fixed_in":["1.4.3-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"irssi","fixed_in":["1.4.3-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"irssi","fixed_in":["1.4.3-2"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"irssi","fixed_in":["1.4.3-1.1.mga9"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"irssi","fixed_in":["1.4.4-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-2"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-2.1"}]}]}],"products":[{"vendor":"irssi","product":"irssi"}],"references":[{"url":"https://irssi.org/security/irssi_sa_2023_03.txt","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://www.openwall.com/lists/oss-security/2023/03/30/5","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29132","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rx4q-gwv4-r27p"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29132.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-29132","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0063.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31754","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6002-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29132","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-29132","description":"Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line.","status":"published","published":"2023-04-14T00:00:00Z","modified":"2025-02-06T21:25:19.191Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:35:28.643185Z"}],"euvd":[{"id":"EUVD-2023-32735","description":"Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line.","status":"published","published":"2023-04-14T00:00:00Z","modified":"2025-02-06T21:25:19Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T00:04:02.347135Z"}],"ghsa":[{"id":"GHSA-rx4q-gwv4-r27p","title":"Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special...","description":"Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line.","status":"published","published":"2023-04-14T03:30:29Z","modified":"2024-04-04T03:27:48Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:56:14.876837Z"}],"nvd":[{"id":"CVE-2023-29132","description":"Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line.","status":"published","published":"2023-04-14T01:15:08.367Z","modified":"2026-06-17T05:49:27.5Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:07:55.652109Z"}],"osv":[{"id":"CVE-2023-29132","description":"Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line.","status":"published","published":"2023-04-14T00:00:00Z","modified":"2026-10-28T02:30:43.216455515Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:31.468318Z"},{"id":"DEBIAN-CVE-2023-29132","description":"Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line.","status":"published","published":"2023-04-14T01:15:08.367Z","modified":"2026-10-26T18:02:14.039848213Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"MGASA-2024-0063","title":"Updated irssi packages fix security vulnerabilities","description":"The updated packages fix a security vulnerability:\nIrssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use\nof a stale special collector reference. This occurs when printing of a\nnon-formatted line is concurrent with printing of a formatted line.\n(CVE-2023-29132)\n","status":"published","published":"2024-03-15T16:49:28Z","modified":"2026-04-16T04:43:52.226615933Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:12848-1","title":"irssi-1.4.4-2.1 on GA media","description":"These are all security issues fixed in the irssi-1.4.4-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:46:56.96983Z","updated_at":"2026-11-02T16:58:36.025801Z"}]}}