In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade less | Jun 27, 2023 | Feb 7, 2023 |
| Alpine Linux | — | Upgrade less | Mar 21, 2024 | Feb 7, 2023 |
| Amazon_linux_2023 | — | Upgrade lessUpgrade less-debugsourceUpgrade less-debuginfo | Feb 17, 2025 | Feb 7, 2023 |
| Centos_linux | — | Upgrade lessUpgrade less-debuginfoUpgrade less-debugsource | Jun 22, 2023 | Feb 7, 2023 |
| Debian | — | Upgrade less | Jul 30, 2024 | Feb 7, 2023 |
| Gentoo Linux | — | Upgrade sys-apps/less. | Oct 11, 2023 | Feb 7, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade less | Jul 5, 2023 | Feb 7, 2023 |
| Oracle_linux | — | Upgrade less | Jun 22, 2023 | Feb 7, 2023 |
| Redhat_linux | — | Upgrade less-debuginfoUpgrade lessUpgrade less-debugsource | Jun 22, 2023 | Feb 7, 2023 |
| Rocky_linux | — | Upgrade less-debuginfoUpgrade less-debugsourceUpgrade less | Mar 5, 2024 | Feb 7, 2023 |
| Suse | — | Upgrade less | Feb 13, 2023 | Feb 7, 2023 |
| Ubuntu | — | Upgrade less | Mar 22, 2023 | Feb 7, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub