According to the versions of the less package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.(CVE-2022-48624)

    less through 653 allows OS command execution via a newline character in the name of a file, because     quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file     names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN     environment variable, but this is set by default in many common cases.(CVE-2024-32487)

Tenable has extracted the preceding description block directly from the EulerOS less security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:3513 advisory.

    * less: OS command injection (CVE-2024-32487)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-3513 advisory.

    - Fix CVE-2024-32487

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of less installed on the remote host is prior to 458-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2547 advisory.

    less through 653 allows OS command execution via a newline character in the name of a file, because     quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file     names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN     environment variable, but this is set by default in many common cases. (CVE-2024-32487)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:3513 advisory.

    * less: OS command injection (CVE-2024-32487)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:4528 advisory.

    The less utility is a text file browser that resembles more, but allows users to move backwards in the     file as well as forwards. Since less does not read the entire input file at startup, it also starts more     quickly than ordinary text editors.

    Security Fix(es):

    * less: OS command injection (CVE-2024-32487)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has less packages installed that are affected by a vulnerability:

  - less through 653 allows OS command execution via a newline character in the name of a file, because     quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file     names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN     environment variable, but this is set by default in many common cases. (CVE-2024-32487)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5679 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5679-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     May 03, 2024                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : less     CVE ID         : CVE-2022-48624 CVE-2024-32487     Debian Bug     : 1064293 1068938 1069681

    Several vulnerabilities were discovered in less, a file pager, which may     result in the execution of arbitrary commands if a file with a specially     crafted file name is processed.

    For the oldstable distribution (bullseye), these problems have been fixed     in version 551-2+deb11u2.

    For the stable distribution (bookworm), these problems have been fixed in     version 590-2.1~deb12u2.

    We recommend that you upgrade your less packages.

    For the detailed security status of less please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/less

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:4256 advisory.

    The less utility is a text file browser that resembles more, but allows users to move backwards in the     file as well as forwards. Since less does not read the entire input file at startup, it also starts more     quickly than ordinary text editors.

    Security Fix(es):

    * less: OS command injection (CVE-2024-32487)

    * less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2024:4256 advisory.

    * less: OS command injection (CVE-2024-32487)
    * less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
202514	EulerOS 2.0 SP9 : less (EulerOS-SA-2024-1938)	Nessus	Huawei Local Security Checks	7/16/2024	3/28/2025	high
198166	AlmaLinux 9 : less (ALSA-2024:3513)	Nessus	Alma Linux Local Security Checks	5/30/2024	5/30/2024	high
198167	Oracle Linux 9 : less (ELSA-2024-3513)	Nessus	Oracle Linux Local Security Checks	5/30/2024	9/21/2024	high
198271	Amazon Linux 2 : less (ALAS-2024-2547)	Nessus	Amazon Linux Local Security Checks	5/31/2024	12/11/2024	high
200571	Rocky Linux 9 : less (RLSA-2024:3513)	Nessus	Rocky Linux Local Security Checks	6/14/2024	6/14/2024	high
202368	RHEL 9 : less (RHSA-2024:4528)	Nessus	Red Hat Local Security Checks	7/15/2024	11/7/2024	high
242752	NewStart CGSL MAIN 7.02 : less Vulnerability (NS-SA-2025-0106)	Nessus	NewStart CGSL Local Security Checks	7/25/2025	7/25/2025	high
194970	Debian dsa-5679 : less - security update	Nessus	Debian Local Security Checks	5/4/2024	3/28/2025	high
201278	RHEL 8 : less (RHSA-2024:4256)	Nessus	Red Hat Local Security Checks	7/2/2024	3/28/2025	high
201549	AlmaLinux 8 : less (ALSA-2024:4256)	Nessus	Alma Linux Local Security Checks	7/3/2024	3/28/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high