Important: less

2024-02-2823:54:00

alas.aws.amazon.com

less

close_altfile

filename.c

shell_quote

lessclose

cve-2022-48624

yum

update

red hat

mitre

unix

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

JSON

Issue Overview:

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Affected Packages:

less

Issue Correction:
Run yum update less to update your system.

New Packages:

i686:  
    less-436-13.13.amzn1.i686  
    less-debuginfo-436-13.13.amzn1.i686  
  
src:  
    less-436-13.13.amzn1.src  
  
x86_64:  
    less-debuginfo-436-13.13.amzn1.x86_64  
    less-436-13.13.amzn1.x86_64

Additional References

Red Hat: CVE-2022-48624

Mitre: CVE-2022-48624

OSVersionArchitecturePackageVersionFilename
Amazon Linux1i686less< 436-13.13.amzn1less-436-13.13.amzn1.i686.rpm
Amazon Linux1i686less-debuginfo< 436-13.13.amzn1less-debuginfo-436-13.13.amzn1.i686.rpm
Amazon Linux1x86_64less-debuginfo< 436-13.13.amzn1less-debuginfo-436-13.13.amzn1.x86_64.rpm
Amazon Linux1x86_64less< 436-13.13.amzn1less-436-13.13.amzn1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
Amazon Linux	1	i686	less	< 436-13.13.amzn1	less-436-13.13.amzn1.i686.rpm
Amazon Linux	1	i686	less-debuginfo	< 436-13.13.amzn1	less-debuginfo-436-13.13.amzn1.i686.rpm
Amazon Linux	1	x86_64	less-debuginfo	< 436-13.13.amzn1	less-debuginfo-436-13.13.amzn1.x86_64.rpm
Amazon Linux	1	x86_64	less	< 436-13.13.amzn1	less-436-13.13.amzn1.x86_64.rpm