The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:3669 advisory.

  - less through 653 allows OS command execution via a newline character in the name of a file, because     quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file     names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN     environment variable, but this is set by default in many common cases. (CVE-2024-32487)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the less package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    less through 653 allows OS command execution via a newline character in the name of a file, because     quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file     names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN     environment variable, but this is set by default in many common cases.(CVE-2024-32487)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization less security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the less package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.(CVE-2022-48624)

    less through 653 allows OS command execution via a newline character in the name of a file, because     quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file     names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN     environment variable, but this is set by default in many common cases.(CVE-2024-32487)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization less security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1534-1 advisory.

  - less through 653 allows OS command execution via a newline character in the name of a file, because     quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file     names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN     environment variable, but this is set by default in many common cases. (CVE-2024-32487)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4256 advisory.

    * less: OS command injection (CVE-2024-32487)

    * less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-8138:03 advisory.

    * less: OS command injection (CVE-2024-32487)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-8510:05 advisory.

    * less: OS command injection (CVE-2024-32487)
      * less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0610 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2022-48624:
    close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

    CVE-2022-46663:
    In GNU Less before 609, crafted data can result in less -R not filtering ANSI escape sequences sent to     the terminal.

    CVE-2024-32487:
    less through 653 allows OS command execution via a newline character in the name of a file, because     quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file     names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN     environment variable, but this is set by default in many common cases.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
204711	CentOS 7 : less (RHSA-2024:3669)	Nessus	CentOS Local Security Checks	7/25/2024	7/25/2024	high
206548	EulerOS Virtualization 2.12.1 : less (EulerOS-SA-2024-2309)	Nessus	Huawei Local Security Checks	9/3/2024	9/3/2024	high
205849	EulerOS Virtualization 2.10.1 : less (EulerOS-SA-2024-2141)	Nessus	Huawei Local Security Checks	8/19/2024	3/28/2025	high
205963	EulerOS Virtualization 2.11.0 : less (EulerOS-SA-2024-2180)	Nessus	Huawei Local Security Checks	8/21/2024	8/21/2024	high
195102	SUSE SLES15 Security Update : less (SUSE-SU-2024:1534-1)	Nessus	SuSE Local Security Checks	5/7/2024	5/7/2024	high
235510	RockyLinux 8 : less (RLSA-2024:4256)	Nessus	Rocky Linux Local Security Checks	5/7/2025	5/7/2025	high
291835	MiracleLinux 7 : less-458-10.el7 (AXSA:2024-8138:03)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
292881	MiracleLinux 8 : less-530-3.el8_10 (AXSA:2024-8510:05)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
276270	TencentOS Server 4: less (TSSA-2024:0610)	Nessus	Tencent Local Security Checks	11/20/2025	11/20/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high