{"id":"CVE-2023-45925","aliases":["DEBIAN-CVE-2023-45925","EUVD-2023-50188","GHSA-q22h-9rc9-jpmp"],"status":"disputed","title":"GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference...","description":"GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).","epss":{"day":"2026-11-10","score":0.00317,"percentile":0.24877,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-476"],"published":"2024-03-27T00:00:00Z","modified":"2026-10-26T17:47:32Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"mc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:4.8.29-2","3:4.8.30-1","3:4.8.31-1","3:4.8.31-1~bpo12+1","3:4.8.33-1","3:4.8.33-1.1"]},{"source":"osv","ecosystem":"Debian:13","package":"mc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:4.8.33-1","3:4.8.33-1+deb13u1","3:4.8.33-1.1"]},{"source":"osv","ecosystem":"Debian:14","package":"mc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:4.8.33-1","3:4.8.33-1.1"]}],"products":[{"vendor":"midnight_commander","product":"midnight_commander"}],"references":[{"url":"https://midnight-commander.org/ticket/4484","tags":["x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/53","tags":["mailing-list","x_transferred","web"]},{"url":"http://packetstormsecurity.com/files/176808/Midnight-Commander-4.8.29-146-g299d9a2fb-Null-Pointer.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45925"},{"url":"https://github.com/advisories/GHSA-q22h-9rc9-jpmp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-45925","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-45925","description":"GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).","status":"disputed","published":"2024-03-27T00:00:00Z","modified":"2025-11-04T18:18:10.86Z","cwes":["CWE-476"],"updated_at":"2026-11-02T14:35:22.640346Z"}],"euvd":[{"id":"EUVD-2023-50188","description":"GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).","status":"published","published":"2024-03-27T00:00:00Z","modified":"2025-11-04T18:18:10Z","updated_at":"2026-11-02T19:49:24.543935Z"}],"ghsa":[{"id":"GHSA-q22h-9rc9-jpmp","title":"GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference...","description":"GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).","status":"published","published":"2024-03-27T06:30:32Z","modified":"2025-11-04T21:31:23Z","cwes":["CWE-476"],"updated_at":"2026-11-02T15:04:36.536202Z"}],"nvd":[{"id":"CVE-2023-45925","description":"GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).","status":"disputed","published":"2024-03-27T05:15:47.32Z","modified":"2026-06-17T06:29:48.123Z","cwes":["CWE-476"],"updated_at":"2026-11-02T14:09:10.192572Z"}],"osv":[{"id":"CVE-2023-45925","description":"GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).","status":"published","published":"2024-03-27T05:15:47Z","modified":"2026-04-10T05:01:44.652229Z","updated_at":"2026-11-02T15:44:34.287121Z"},{"id":"DEBIAN-CVE-2023-45925","description":"GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).","status":"published","published":"2024-03-27T05:15:47.32Z","modified":"2026-10-26T17:47:32.429979671Z","updated_at":"2026-11-02T15:45:40.275853Z"}]}}