Lucene search
Veracode Vulnerability DatabaseVERACODE:46631HistoryApr 26, 2024 - 6:59 a.m.
Arbitrary Command Execution
2024-04-2606:59:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
less
vulnerability
command execution
shell_quote
filename.c
command-line utility
less is vulnerable to Arbitrary Command Execution.The vulnerability is due to the omission of shell_quote calls for LESSCLOSE in the close_altfile function within the filename.c file of the less command-line utility, allows attackers to execute arbitrary commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| less:sid | eq | 551-2 | |
| less:buster | eq | 487-0.1+b1 | |
| less:sid | eq | 551-2 | |
| less:buster | eq | 487-0.1+b1 |
References
Related
amazon
amazon
Important: less
2024-02-29 10:03:00
Important: less
2024-02-28 23:54:00
redhat
redhat
(RHSA-2024:1692) Moderate: less security update
2024-04-08 09:13:29
(RHSA-2024:1875) Moderate: less security update
2024-04-18 00:58:21
(RHSA-2024:1989) Moderate: less security update
2024-04-23 13:22:11
cvelist
cvelist
CVE-2022-48624
2024-02-19 00:00:00
osv
osv
CVE-2022-48624
2024-02-19 01:15:48
Moderate: less security update
2024-05-10 14:32:36
Moderate: less security update
2024-04-08 00:00:00
redhatcve
redhatcve
CVE-2022-48624
2024-02-20 09:19:56
nessus
nessus
RHEL 8 : less (RHSA-2024:1610)
2024-04-02 00:00:00
SUSE SLES12 Security Update : less (SUSE-SU-2024:1189-1)
2024-04-11 00:00:00
EulerOS Virtualization 2.11.1 : less (EulerOS-SA-2024-1716)
2024-05-29 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1189-1)
2024-05-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1192-1)
2024-05-07 00:00:00
Huawei EulerOS: Security Advisory for less (EulerOS-SA-2024-1801)
2024-06-03 00:00:00
rocky
rocky
less security update
2024-05-10 14:32:36
less security update
2024-04-05 14:55:53
cloudlinux
cloudlinux
less: Fix of CVE-2022-48624
2024-04-19 10:41:21
debiancve
debiancve
CVE-2022-48624
2024-02-19 01:15:48
nvd
nvd
CVE-2022-48624
2024-02-19 01:15:48
redos
redos
ROS-20240607-02
2024-06-07 00:00:00
prion
prion
Design/Logic Flaw
2024-02-19 01:15:00
ubuntu
ubuntu
less vulnerability
2024-02-27 00:00:00
ubuntucve
ubuntucve
CVE-2022-48624
2024-02-19 00:00:00
almalinux
almalinux
Moderate: less security update
2024-04-08 00:00:00
Moderate: less security update
2024-04-02 00:00:00
oraclelinux
oraclelinux
less security update
2024-04-03 00:00:00
less security update
2024-04-08 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-48624 affecting package less for versions less than 590-3
2024-03-21 08:09:05
cve
cve
CVE-2022-48624
2024-02-19 01:15:48
cloudfoundry
cloudfoundry
USN-6664-1: less vulnerability | Cloud Foundry
2024-04-04 00:00:00
debian
debian
[SECURITY] [DLA 3823-1] less security update
2024-05-27 19:50:55
[SECURITY] [DSA 5679-1] less security update
2024-05-03 21:12:55
ibm
ibm