close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE

🗓️ 12 Nov 2024 00:00:00Reported by Broadcom Security ResponseType

Close_altfile in filename.c omits shell_quote calls for LESSCLOSE, vulnerable to command injectio

Reporter	Title	Published	Views	Family All 169
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in less library (CVE-2022-48624) affects Power HMC.	26 Jul 202410:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	23 Apr 202414:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	15 Apr 202502:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary command execution in Less [CVE-2022-48624]	20 Jun 202418:22	–	ibm
Tenable Nessus	Amazon Linux 2023 : less (ALAS2023-2023-123)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : less (ALAS-2024-2485)	5 Mar 202400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : less (ALAS-2024-1924)	5 Mar 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0168: less (ALINUX3-SA-2024:0168)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : less (ALSA-2024:1610)	3 Apr 202400:00	–	nessus