EUVD-2022-47485

Malicious code in bioql PyPI...

GLSA-202211-02 : lesspipe: Arbitrary Code Exeecution

The remote host is affected by the vulnerability described in GLSA-202211-02 lesspipe: Arbitrary Code Exeecution - lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash. CVE-2022-44542...

lesspipe: Arbitrary Code Exeecution

Background lesspipe is a preprocessor for less. Description lesspipe has support for parsing Perl storable "PST" files, Impact A crafted Perl storable file which is passed into lesspipe could result in arbitrary code execution. Workaround There is no known workaround at this time. Resolution All...

Design/Logic Flaw

lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash...

Gentoo code issues and vulnerabilities

Gentoo is an open source Linux system from the Gentoo Foundation. A code issue vulnerability exists in Gentoo lesspipe versions prior to 2.06. An attacker can exploit this vulnerability to execute code via a Perl Storable pst file...

CVE-2022-44542

lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash...

CVE-2022-44542

lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash...

CVE-2022-44542

lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash...

PT-2022-27228 · Lesspipe +1 · Lesspipe +1

Name of the Vulnerable Software and Affected Versions: lesspipe versions prior to 2.06 Description: The issue allows attackers to execute code via Perl Storable pst files. This is due to deserialized object destructor execution via a key/value pair in a hash. Recommendations: For versions prior t...

CVE-2022-44542

CVE-2022-44542 affects lesspipe up to version 2.05; vulnerability arises from handling Perl Storable (pst) files where a crafted PST can trigger deserialized object destructor execution, enabling remote code execution. Impact is described as total compromise with high confidentiality, integrity, ...

CVE-2022-44542: Deserialization of Untrusted Data

lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash...