CVE-2022-46663

CVE-2022-46663 affects GNU Less up to version 608 (vulnerable before 609). Crafted data can cause a failure to filter ANSI escape sequences when using the -R option, potentially leaking terminal control sequences. This is documented in multiple sources within connected documents, which indicate t...

CVE-2014-9488

CVE-2014-9488 affects the is_utf8_well_formed() function in GNU less up to version 475, enabling an out-of-bounds read via malformed UTF-8 data. Connected advisories report this as a fixed issue in various distributions (e.g., SUSE/SUSE-SU-2020:2687-1; Mageia MGASA-2015-0139; openSUSE updates; Eu...

CVE-2004-2264

GNU less versions 358–382 contain a format-string bug in the open_altfile function (filename.c) that may allow local users to cause a denial of service or possibly execute arbitrary code via the LESSOPEN environment variable. The PT-2004-3159 advisory notes this is not a vulnerability unless priv...