CVE-2022-48624

Опубликовано: 19 фев. 2024

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

Ссылки

https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144
Patch
https://github.com/gwsw/less/compare/v605...v606
Patch
https://greenwoodsoftware.com/less/
Release Notes
https://lists.debian.org/debian-lts-announce/2024/05/msg00018.html
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20240605-0010/
Third Party Advisory
https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144
Patch
https://github.com/gwsw/less/compare/v605...v606
Patch
https://greenwoodsoftware.com/less/
Release Notes
https://lists.debian.org/debian-lts-announce/2024/05/msg00018.html
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20240605-0010/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:greenwoodsoftware:less:*:*:*:*:*:*:*:*

Версия до 606 (исключая)

EPSS

Процентиль: 58%

0.00366

Низкий

7.8 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-78

Связанные уязвимости

CVE-2022-48624

CVSS3: 7.8

ubuntu

больше 1 года назад

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

CVE-2022-48624

CVSS3: 7

redhat

больше 1 года назад

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

CVE-2022-48624

CVSS3: 7.8

msrc

4 месяца назад

Описание отсутствует

CVE-2022-48624

CVSS3: 7.8

debian

больше 1 года назад

close_altfile in filename.c in less before 606 omits shell_quote calls ...

SUSE-SU-2024:1192-1

suse-cvrf

около 1 года назад

Security update for less

EPSS

Процентиль: 58%

0.00366

Низкий

7.8 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-78