CVE-2022-44542

Опубликовано: 01 нояб. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution via a key/value pair in a hash.

Ссылки

https://bugs.gentoo.org/865631
Issue Tracking
Patch
Third Party Advisory
https://github.com/wofr06/lesspipe/releases/tag/v2.06
Release Notes
Third Party Advisory
https://security.gentoo.org/glsa/202211-02
Third Party Advisory
https://bugs.gentoo.org/865631
Issue Tracking
Patch
Third Party Advisory
https://github.com/wofr06/lesspipe/releases/tag/v2.06
Release Notes
Third Party Advisory
https://security.gentoo.org/glsa/202211-02
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lesspipe_project:lesspipe:*:*:*:*:*:*:*:*

Версия до 2.06 (исключая)

EPSS

Процентиль: 75%

0.00884

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-502

Связанные уязвимости

GHSA-2m3w-662q-8c6m