Upstream information

CVE-2023-29132 at MITRE

Description

Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line.

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having important severity.

CVSS v3 Scores
  CNA (CISA-ADP) National Vulnerability Database SUSE
Base Score 5.3 5.3 7.5
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector Network Network Network
Attack Complexity Low Low Low
Privileges Required None None None
User Interaction None None None
Scope Unchanged Unchanged Unchanged
Confidentiality Impact None None None
Integrity Impact None None None
Availability Impact Low Low High
CVSSv3 Version 3.1 3.1 3.1
SUSE Bugzilla entry: 1210077 [RESOLVED / FIXED]

No SUSE Security Announcements cross referenced.

List of released packages

Product(s) Fixed package version(s) References
openSUSE Tumbleweed
  • irssi >= 1.4.4-2.1
  • irssi-devel >= 1.4.4-2.1
 Patchnames:
openSUSE-Tumbleweed-2024-12848

SUSE Timeline for this CVE

CVE page created: Mon Apr 3 16:00:53 2023
CVE page last modified: Fri Feb 7 11:57:35 2025