CVE-2022-44542
lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution via a key/val...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution via a key/value pair in a hash.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- web bugs.gentoo.org
- web github.com