CVE-2022-44542
lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution via a key/val...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution via a key/value pair in a hash.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- web bugs.gentoo.org
- web github.com