CVE-2023-29132

Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29132.json",
    "cna_assigner": "mitre",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "1.4.x"
                },
                {
                    "fixed": "1.4.4"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

References

Affected packages

Git / github.com/irssi/irssi

Affected ranges

Type

GIT

Repo

https://github.com/irssi/irssi

Events

Introduced

Fixed

a09fcb90930c3f0d9e6bdf660dd01c451e817e46

Database specific

{
    "cpe": "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.3.0"
        },
        {
            "fixed": "1.4.4"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

0.*

0.7.16

0.7.17

0.7.18

0.7.19

0.7.20

0.7.20.1

0.7.21

0.7.22

0.7.23

0.7.24

0.7.25

0.7.26

0.7.27

0.7.28

0.7.90

0.7.90-cvs

0.7.91

0.7.92

0.7.93

0.7.94

0.7.95

0.7.96

0.7.97

0.7.98

0.7.98.2

0.7.98.3

0.7.98.CVS

0.8.0

0.8.1

0.8.10

0.8.11

0.8.12

0.8.13

0.8.14

0.8.15

0.8.16

0.8.17

0.8.17-rc2

0.8.2

0.8.3

0.8.4

0.8.6

0.8.7

0.8.8

0.8.9

1.*

1.0.0

1.1-dev

1.2-dev

1.2.0

1.3-dev

1.4.1

1.4.2

1.4.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-29132.json"