CVE-2024-32487 allows OS command execution via newline character in file name quoting in less through 653. Requires attacker-controlled file names and LESSOPEN environment variable
Reporter | Title | Published | Views | Family All 172 |
---|---|---|---|---|
![]() | RHEL 9 : less (RHSA-2024:4529) | 15 Jul 202400:00 | – | nessus |
![]() | EulerOS Virtualization 2.12.0 : less (EulerOS-SA-2024-2329) | 3 Sep 202400:00 | – | nessus |
![]() | RHEL 9 : less (RHSA-2024:4528) | 15 Jul 202400:00 | – | nessus |
![]() | Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS. : less vulnerability (USN-6756-1) | 29 Apr 202400:00 | – | nessus |
![]() | SUSE SLES12 Security Update : less (SUSE-SU-2024:1550-1) | 8 May 202400:00 | – | nessus |
![]() | Fedora 40 : less (2024-c0e7a4f5ef) | 29 Aug 202400:00 | – | nessus |
![]() | RHEL 7 : less (RHSA-2024:3669) | 6 Jun 202400:00 | – | nessus |
![]() | AlmaLinux 9 : less (ALSA-2024:3513) | 30 May 202400:00 | – | nessus |
![]() | Amazon Linux 2 : less (ALAS-2024-2547) | 31 May 202400:00 | – | nessus |
![]() | Slackware Linux 15.0 / current less Vulnerability (SSA:2024-105-01) | 14 Apr 202400:00 | – | nessus |
OS | OS Version | Architecture | Package | Package Version | Filename |
---|---|---|---|---|---|
Alpine | 3.20-main | noarch | less | 643-r2 | UNKNOWN |
Alpine | 3.19-main | noarch | less | 643-r2 | UNKNOWN |
Alpine | 3.18-main | noarch | less | 633-r0 | UNKNOWN |
Alpine | 3.17-main | noarch | less | 608-r1 | UNKNOWN |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo