ALSA-2023:3725

    Dashboard / Vulnerabilities / ALSA-2023:3725

    ALSA-2023:3725

    Published: 21 Jun 2023Last Modified: 4 Feb 2026

    Summary: Moderate: less security update

    Details: The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors. Security Fix(es): * less: crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal (CVE-2022-46663) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    References: https://access.redhat.com/errata/RHSA-2023:3725, https://access.redhat.com/security/cve/CVE-2022-46663, https://bugzilla.redhat.com/2169621, https://errata.almalinux.org/9/ALSA-2023-3725.html

    Affected packages

    Package

    Name: less

    Purl: pkg:rpm/almalinux/less

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -590-2.el9_2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    ALSA-2023:3725 | CVE-DB