CVE-2024-32487

🗓️ 14 Apr 2024 14:23:59Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 166 Views

CVE-2024-32487 OS command execution vulnerability via newline character in file nam

Reporter	Title	Published	Views	Family All 207
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to less atarbitrary command execution vulnerability [CVE-2024-32487]	6 Aug 202421:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	8 Aug 202417:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in less (CVE-2024-32487) affects Power HMC.	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in axios affect IBM Voice Gateway	15 Apr 202502:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	15 Apr 202502:53	–	ibm
Tenable Nessus	Amazon Linux 2023 : less (ALAS2023-2024-622)	28 May 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : less (ALAS-2024-2547)	31 May 202400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : less (ALAS-2025-1958)	5 Feb 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0168: less (ALINUX3-SA-2024:0168)	14 May 202500:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-32487
openwall	www.openwall.com/lists/oss-security/2024/04/12/5
openwall	www.openwall.com/lists/oss-security/2024/04/13/2
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

17 Nov 2024 15:23Current

9High risk

Vulners AI Score9

CVSS 3.18.6

EPSS0.00329

cve-2024-32487 os command execution newline character filename mishandling lessopen environment variable