Lucene search
Veracode Vulnerability DatabaseVERACODE:46631HistoryApr 26, 2024 - 6:59 a.m.
Arbitrary Command Execution
2024-04-2606:59:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
less
vulnerability
command execution
shell_quote
filename.c
command-line utility
less is vulnerable to Arbitrary Command Execution.The vulnerability is due to the omission of shell_quote calls for LESSCLOSE in the close_altfile function within the filename.c file of the less command-line utility, allows attackers to execute arbitrary commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| less:sid | eq | 551-2 | |
| less:buster | eq | 487-0.1+b1 | |
| less:sid | eq | 551-2 | |
| less:buster | eq | 487-0.1+b1 |
References
Related
prion
prion
Design/Logic Flaw
2024-02-19 01:15:00
ubuntucve
ubuntucve
CVE-2022-48624
2024-02-19 00:00:00
nessus
nessus
Amazon Linux 2 : less (ALAS-2024-2485)
2024-03-05 00:00:00
AlmaLinux 8 : less (ALSA-2024:1610)
2024-04-03 00:00:00
CentOS 8 : less (CESA-2024:1610)
2024-04-08 00:00:00
almalinux
almalinux
Moderate: less security update
2024-04-08 00:00:00
Moderate: less security update
2024-04-02 00:00:00
osv
osv
less vulnerability
2024-02-27 16:47:13
Moderate: less security update
2024-04-05 14:55:53
Moderate: less security update
2024-04-08 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for less (EulerOS-SA-2024-1727)
2024-05-30 00:00:00
Huawei EulerOS: Security Advisory for less (EulerOS-SA-2024-1716)
2024-05-30 00:00:00
Huawei EulerOS: Security Advisory for less (EulerOS-SA-2024-1789)
2024-06-03 00:00:00
ubuntu
ubuntu
less vulnerability
2024-02-27 00:00:00
debiancve
debiancve
CVE-2022-48624
2024-02-19 01:15:48
amazon
amazon
Important: less
2024-02-28 23:54:00
Important: less
2024-02-29 10:03:00
nvd
nvd
CVE-2022-48624
2024-02-19 01:15:48
redos
redos
ROS-20240607-02
2024-06-07 00:00:00
cloudlinux
cloudlinux
less: Fix of CVE-2022-48624
2024-04-19 10:41:21
cve
cve
CVE-2022-48624
2024-02-19 01:15:48
cbl_mariner
cbl_mariner
CVE-2022-48624 affecting package less for versions less than 590-3
2024-03-21 08:09:05
redhat
redhat
(RHSA-2024:1610) Moderate: less security update
2024-04-02 14:57:05
(RHSA-2024:1875) Moderate: less security update
2024-04-18 00:58:21
(RHSA-2024:1692) Moderate: less security update
2024-04-08 09:13:29
oraclelinux
oraclelinux
less security update
2024-04-03 00:00:00
less security update
2024-04-08 00:00:00
cloudfoundry
cloudfoundry
USN-6664-1: less vulnerability | Cloud Foundry
2024-04-04 00:00:00
rocky
rocky
less security update
2024-04-05 14:55:53
less security update
2024-05-10 14:32:36
redhatcve
redhatcve
CVE-2022-48624
2024-02-20 09:19:56
cvelist
cvelist
CVE-2022-48624
2024-02-19 00:00:00
debian
debian
[SECURITY] [DLA 3823-1] less security update
2024-05-27 19:50:55
[SECURITY] [DSA 5679-1] less security update
2024-05-03 21:12:55
ibm
ibm
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00