CVE-2022-46663

Опубликовано: 07 фев. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.

Ссылки

http://www.greenwoodsoftware.com/less/news.609.html
Broken Link
http://www.openwall.com/lists/oss-security/2023/02/07/7
Mailing List
Third Party Advisory
https://github.com/gwsw/less/commit/a78e1351113cef564d790a730d657a321624d79c
Patch
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LR7AUWB34JD4PCW3HHASBEDGGHFWPAQP/
https://security.gentoo.org/glsa/202310-11
Third Party Advisory
https://www.openwall.com/lists/oss-security/2023/02/07/7
Mailing List
Patch
Third Party Advisory
http://www.greenwoodsoftware.com/less/news.609.html
Broken Link
http://www.openwall.com/lists/oss-security/2023/02/07/7
Mailing List
Third Party Advisory
https://github.com/gwsw/less/commit/a78e1351113cef564d790a730d657a321624d79c
Patch
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LR7AUWB34JD4PCW3HHASBEDGGHFWPAQP/
https://security.gentoo.org/glsa/202310-11
Third Party Advisory
https://www.openwall.com/lists/oss-security/2023/02/07/7
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:less:*:*:*:*:*:*:*:*

Версия от 566 (включая) до 609 (исключая)

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00095

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2022-46663

CVSS3: 7.5

ubuntu

почти 3 года назад

In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.

CVE-2022-46663

CVSS3: 7.5

redhat

почти 3 года назад

In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.

CVE-2022-46663

CVSS3: 7.5

msrc

почти 3 года назад

In GNU Less before 609 crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.

CVE-2022-46663

CVSS3: 7.5

debian

почти 3 года назад

In GNU Less before 609, crafted data can result in "less -R" not filte ...

SUSE-SU-2023:0348-1

suse-cvrf

почти 3 года назад

Security update for less

EPSS

Процентиль: 27%

0.00095

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-Other