close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:1692 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - less: OS command injection (CVE-2024-32487)

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5679 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

  - less through 653 allows OS command execution via a newline character in the name of a file, because     quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file     names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN     environment variable, but this is set by default in many common cases. (CVE-2024-32487)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the less-590-3.el9 build changelog.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1989 advisory.

  - less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1875 advisory.

  - less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1190-1 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1192-1 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1189-1 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:1692 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-1692 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2024:1610 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1692 advisory.

  - less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:1610 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-1610 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:1610 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1610 advisory.

  - less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of less installed on the remote host is prior to 436-13.13. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1924 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of less installed on the remote host is prior to 458-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2485 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 host has a package installed that is affected by a vulnerability as referenced in the USN-6664-1 advisory.

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-123 advisory.

  - In GNU Less before 609, crafted data can result in less -R not filtering ANSI escape sequences sent to     the terminal. (CVE-2022-46663)

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
196954	Rocky Linux 9 : less (RLSA-2024:1692)	Nessus	Rocky Linux Local Security Checks	high
196559	RHEL 6 : less (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
196548	RHEL 7 : less (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
194970	Debian dsa-5679 : less - security update	Nessus	Debian Local Security Checks	high
193945	CentOS 9 : less-590-3.el9	Nessus	CentOS Local Security Checks	high
193811	RHEL 8 : less (RHSA-2024:1989)	Nessus	Red Hat Local Security Checks	high
193469	RHEL 8 : less (RHSA-2024:1875)	Nessus	Red Hat Local Security Checks	high
193195	SUSE SLES15 Security Update : less (SUSE-SU-2024:1190-1)	Nessus	SuSE Local Security Checks	high
193181	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : less (SUSE-SU-2024:1192-1)	Nessus	SuSE Local Security Checks	high
193177	SUSE SLES12 Security Update : less (SUSE-SU-2024:1189-1)	Nessus	SuSE Local Security Checks	high
193156	AlmaLinux 9 : less (ALSA-2024:1692)	Nessus	Alma Linux Local Security Checks	high
193029	Oracle Linux 9 : less (ELSA-2024-1692)	Nessus	Oracle Linux Local Security Checks	high
192979	CentOS 8 : less (CESA-2024:1610)	Nessus	CentOS Local Security Checks	high
192971	RHEL 9 : less (RHSA-2024:1692)	Nessus	Red Hat Local Security Checks	high
192951	Rocky Linux 8 : less (RLSA-2024:1610)	Nessus	Rocky Linux Local Security Checks	high
192905	Oracle Linux 8 : less (ELSA-2024-1610)	Nessus	Oracle Linux Local Security Checks	high
192893	AlmaLinux 8 : less (ALSA-2024:1610)	Nessus	Alma Linux Local Security Checks	high
192855	RHEL 8 : less (RHSA-2024:1610)	Nessus	Red Hat Local Security Checks	high
191521	Amazon Linux AMI : less (ALAS-2024-1924)	Nessus	Amazon Linux Local Security Checks	critical
191520	Amazon Linux 2 : less (ALAS-2024-2485)	Nessus	Amazon Linux Local Security Checks	critical
191066	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 : less vulnerability (USN-6664-1)	Nessus	Ubuntu Local Security Checks	critical
173125	Amazon Linux 2023 : less (ALAS2023-2023-123)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2022-48624

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

critical

critical

critical

high