CVE-2022-44542

lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution via a key/value pair in a hash.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-11-01

Last modified

2025-05-05

Weaknesses

CWE-502

Affected products

• Lesspipe (Lesspipe Project)

References

• https://bugs.gentoo.org/865631
• https://github.com/wofr06/lesspipe/releases/tag/v2.06
• https://security.gentoo.org/glsa/202211-02