CVE-2022-46663
First published: Tue Feb 07 2023(Updated: )
In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU less | >=566<609 | |
| Fedoraproject Fedora | =37 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.greenwoodsoftware.com/less/news.609.html
- http://www.openwall.com/lists/oss-security/2023/02/07/7
- https://github.com/gwsw/less/commit/a78e1351113cef564d790a730d657a321624d79c
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LR7AUWB34JD4PCW3HHASBEDGGHFWPAQP/
- https://security.gentoo.org/glsa/202310-11
- https://www.openwall.com/lists/oss-security/2023/02/07/7
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LR7AUWB34JD4PCW3HHASBEDGGHFWPAQP/
Frequently Asked Questions
What is CVE-2022-46663?
CVE-2022-46663 is a vulnerability in GNU Less before version 609 where crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.
What is the severity of CVE-2022-46663?
CVE-2022-46663 has a severity rating of 7.5 (high).
How can CVE-2022-46663 affect me?
CVE-2022-46663 can affect you if you use GNU Less before version 609 and receive crafted data, as it may allow ANSI escape sequences to be executed on your terminal.
How do I fix CVE-2022-46663?
To fix CVE-2022-46663, update GNU Less to version 609 or later.
Where can I find more information about CVE-2022-46663?
You can find more information about CVE-2022-46663 on the following websites: [http://www.greenwoodsoftware.com/less/news.609.html](http://www.greenwoodsoftware.com/less/news.609.html), [http://www.openwall.com/lists/oss-security/2023/02/07/7](http://www.openwall.com/lists/oss-security/2023/02/07/7), [https://github.com/gwsw/less/commit/a78e1351113cef564d790a730d657a321624d79c](https://github.com/gwsw/less/commit/a78e1351113cef564d790a730d657a321624d79c).
- collector/nvd-index
- collector/nvd-api
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/description
- agent/event
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/gnu
- canonical/gnu less
- version/gnu less/566
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/37