Ubuntu.comUB:CVE-2023-29132CVE-2023-29132
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
0.001 Low
EPSS
Percentile
34.2%
Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a
stale special collector reference. This occurs when printing of a
non-formatted line is concurrent with printing of a formatted line.
Bugs
References
github.com/irssi/irssi/commit/c554a45738712219c066897b09a44d99afeb4240
github.com/irssi/irssi/pull/1456
irssi.org/security/irssi_sa_2023_03.txt
launchpad.net/bugs/cve/CVE-2023-29132
nvd.nist.gov/vuln/detail/CVE-2023-29132
security-tracker.debian.org/tracker/CVE-2023-29132
ubuntu.com/security/notices/USN-6002-1
www.cve.org/CVERecord?id=CVE-2023-29132
Related
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
0.001 Low
EPSS
Percentile
34.2%