CVE-2022-44542

CRITICAL 9.8CVE-2022-44542 · Published 01/11/2022 · updated 17/06/2026

In short

CVE-2022-44542 is a CRITICAL (CVSS 9.8) vulnerability affecting lesspipe (lesspipe project).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.6% of all vulnerabilities.
Fix: update to 2.06 or later.

Package	Affected versions	Patched versions
lesspipe lesspipe_project	`< 2.06`	`2.06`

Description

lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution via a key/value pair in a hash.

References

bugs.gentoo.org/865631 · Issue Tracking
wofr06/lesspipe release v2.06 · Release Notes
security.gentoo.org/glsa/202211-02 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free