CVE-2022-46663: fedoraproject fedora
CVSS: 7.5v3.1HighModified
AliasesSUSE-SU-2023:0348-1RHSA-2023:3725UBUNTU-CVE-2022-46663USN-5848-1DEBIAN-CVE-2022-46663openSUSE-SU-2024:12671-1
Published 07-02-2023Last modified 25-03-2025
Vulnerability summary
CVE-2022-46663 is a high (CVSS 7.5) vulnerability in fedoraproject fedora. EPSS estimates a 1.41% chance of exploitation in the next 30 days, higher than 72.2% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v3.1 (CVE.org)EPSS score
1.41%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 07-02-2023PublishedVulnerability first disclosed.
- 25-03-2025Last modifiedVulnerability information updated.
Description
In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.
CVSS metrics
5 scores · 5 sources · 1 versionHigh 7.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSourcesAll 5 agree
- OSV · Red hatEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
1.41%
Chance of exploitation in the next 30 days
Percentile
72%
Versus all other CVEs
30-day change
0.00 pp
From 1.41% on 19-09-2026
19-09-202619-10-2026
EPSS score1.41%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Opensuse3 products
- less&distro=openSUSE Leap 15.4< 590-150400.3.3.1
- less&distro=openSUSE Leap Micro 5.3< 590-150400.3.3.1
- less&distro=openSUSE Tumbleweed< 608-2.1
Redhat3 products
- less< 0:590-2.el9_2
- less-debuginfo< 0:590-2.el9_2
- less-debugsource< 0:590-2.el9_2
Suse2 products
- less&distro=SUSE Linux Enterprise Micro 5.3< 590-150400.3.3.1
- less&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4< 590-150400.3.3.1
Debian1 product
- less< 590-1.2
Fedoraproject1 product
- fedoraEOL37
Gnu1 product
- less≥ 566, < 609
Ubuntu1 product
- less< 590-1ubuntu0.22.04.1
7 vendors · 12 products
References
19 links- www.greenwoodsoftware.com/less/news.609.htmlBroken Link
- lists.fedoraproject.org/archives/…Vendor Advisory
