less could be made to crash or run arbitrary commands if it received
crafted input.
Software Description:
- less: pager program similar to more
Details:
It was discovered that less incorrectly handled certain file names. An
attacker could possibly use this issue to cause a denial of service or
execute arbitrary commands.
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.04 LTS
less 458-2ubuntu0.1~esm2
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.https://ubuntu.com/security/notices/USN-8079-1
CVE-2022-48624
Get the latest Linux and open source security news straight to your inbox.