Lucene search

UbuntuUSN-6664-1

HistoryFeb 27, 2024 - 12:00 a.m.

less vulnerability

2024-02-2700:00:00

ubuntu.com

ubuntu

vulnerability

packages

less

arbitrary commands

security

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

JSON

Releases

Ubuntu 23.10
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS
Ubuntu 18.04 ESM
Ubuntu 16.04 ESM

Packages

less - pager program similar to more

Details

It was discovered that less incorrectly handled certain file names.
An attacker could possibly use this issue to cause a crash or execute
arbitrary commands.

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchless< 590-2ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchless-dbgsym< 590-2ubuntu0.23.10.1UNKNOWN
Ubuntu22.04noarchless< 590-1ubuntu0.22.04.2UNKNOWN
Ubuntu22.04noarchless-dbgsym< 590-1ubuntu0.22.04.2UNKNOWN
Ubuntu20.04noarchless< 551-1ubuntu0.2UNKNOWN
Ubuntu20.04noarchless-dbgsym< 551-1ubuntu0.2UNKNOWN
Ubuntu18.04noarchless< 487-0.1ubuntu0.1~esm1UNKNOWN
Ubuntu18.04noarchless< 487-0.1UNKNOWN
Ubuntu18.04noarchless-dbgsym< 487-0.1UNKNOWN
Ubuntu16.04noarchless< 481-2.1ubuntu0.2+esm1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	23.10	noarch	less	< 590-2ubuntu0.23.10.1	UNKNOWN
Ubuntu	23.10	noarch	less-dbgsym	< 590-2ubuntu0.23.10.1	UNKNOWN
Ubuntu	22.04	noarch	less	< 590-1ubuntu0.22.04.2	UNKNOWN
Ubuntu	22.04	noarch	less-dbgsym	< 590-1ubuntu0.22.04.2	UNKNOWN
Ubuntu	20.04	noarch	less	< 551-1ubuntu0.2	UNKNOWN
Ubuntu	20.04	noarch	less-dbgsym	< 551-1ubuntu0.2	UNKNOWN
Ubuntu	18.04	noarch	less	< 487-0.1ubuntu0.1~esm1	UNKNOWN
Ubuntu	18.04	noarch	less	< 487-0.1	UNKNOWN
Ubuntu	18.04	noarch	less-dbgsym	< 487-0.1	UNKNOWN
Ubuntu	16.04	noarch	less	< 481-2.1ubuntu0.2+esm1	UNKNOWN

Rows per page:

1-10 of 121

References

ubuntu.com/security/CVE-2022-48624