CVE-2024-32487

Less is a pager. A pager is a program that displays text files. Other pagers commonly in use are more and pg. Pagers are often used in command-line environments like the Unix shell and the MS-DOS command prompt to display files.

Security Fix(es):

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.(CVE-2024-32487)

Less is a pager. A pager is a program that displays text files. Other pagers commonly in use are more and pg. Pagers are often used in command-line environments like the Unix shell and the MS-DOS command prompt to display files.

Security Fix(es):

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.(CVE-2024-32487)

Less is a pager. A pager is a program that displays text files. Other pagers commonly in use are more and pg. Pagers are often used in command-line environments like the Unix shell and the MS-DOS command prompt to display files.

Security Fix(es):

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.(CVE-2024-32487)

The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.

Security Fix(es):

• less: OS command injection (CVE-2024-32487)

• less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.

The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.

Security Fix(es):

• less: OS command injection (CVE-2024-32487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.

Security Fix(es):

• less: OS command injection (CVE-2024-32487)
• less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.

• Fix CVE-2024-32487: filename.c: quoting mishandling.

• CVE-2024-32487: filename.c: quoting mishandling.

• Fix CVE-2024-32487: filename.c: quoting mishandling.

• Fix CVE-2024-32487: filename.c: quoting mishandling.

• SECURITY UPDATE: quoting is mishandled in filename.c.
  • debian/patches/CVE-2024-32487.patch: Fix bug when viewing a file whose name contains a newline.
  • CVE-2024-32487

• CVE-2024-32487: filename.c: quoting mishandling

• CVE-2024-32487: filename.c: quoting mishandling

• SECURITY UPDATE: quoting is mishandled in filename.c.
  • debian/patches/CVE-2024-32487.patch: Fix bug when viewing a file whose name contains a newline.
  • CVE-2024-32487

• Extend ELS coverage to rhel7els, oraclelinux7els and cloudlinux7els.
• CVE-2022-48624 and CVE-2024-32487 were already fixed in 458-10.tuxcare.els1; this release reships those fixes to the additional platforms.

• Extend ELS coverage to rhel7els, oraclelinux7els and cloudlinux7els.
• CVE-2022-48624 and CVE-2024-32487 were already fixed in 458-10.tuxcare.els1; this release reships those fixes to the additional platforms.

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases. (CVE-2024-32487)

These are all security issues fixed in the less-668-2.1 package on the GA media of openSUSE Tumbleweed.

The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.

Security Fix(es):

• less: OS command injection (CVE-2024-32487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Root has patched CVE-2024-32487 in the less package for Root:Alpine:3.19. Multiple fixed versions available.

Root has patched CVE-2024-32487 in the less package for Root:Alpine:3.20. Multiple fixed versions available.

This update for less fixes the following issues:

• CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)

This update for less fixes the following issues:

• CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)

This update for less fixes the following issues:

• CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)

This update for less fixes the following issues:

• CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)

This update for less fixes the following issues:

• CVE-2024-32487: Fixed OS command injection via a newline character in the file name. (bsc#1222849)

This update for less fixes the following issues:

• CVE-2024-32487: Fix a bug where mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)

This update for less fixes the following issues:

• Updated to version 668

  • Fixed crash when using --header on command line
  • Fixed possible crash when scrolling left/right or toggling -S
  • Fixed bug when using #stop in a lesskey file
  • Fixed bug when using --shift or --match-shift on command line with a parameter starting with '.'
  • Fixed bug in R command when file size changes
  • Fixed bug using --header when file does not fill screen
  • Fixed ^X bug when output is not a terminal
  • Fixed bug where ^Z is not handled immediately
  • Fixed bug where first byte from a LESSOPEN filter is deleted if it is greater than 0x7F
  • Fixed uninitialized variable in edit_ifile
  • Fixed incorrect handling of UTF-8 chars in prompts

• Change preprocessor dependencies from Requires to Recommends. It's disabled by default and they are not necessary for less.

• Updated to version 661:

  • fixed crash - buffer overflow by one in fexpand
  • fixed free(): double free detected in tcache 2
  • fixed segmentation fault on line-num-width & -N

• Updated to version 656:

  • Add ^O^N, ^O^P, ^O^L and ^O^O commands and mouse clicks (with --mouse) to find and open OSC8 hyperlinks (github #251).
  • Add --match-shift option.
  • Add --lesskey-content option (github #447).
  • Add LESSKEY_CONTENT environment variable (github #447).
  • Add --no-search-header-lines and --no-search-header-columns options (github #397).
  • Add ctrl-L search modifier (github #367).
  • A ctrl-P at the start of a shell command suppresses the "done" message (github #462).
  • Add attribute characters ('*', '~', '_', '&') to --color parameter (github #471).
  • Allow expansion of environment variables in lesskey files.
  • Add LESSSECURE_ALLOW environment variable (github #449).
  • Add LESS_UNSUPPORT environment variable.
  • Add line number parameter to --header option (github #436).
  • Mouse right-click jumps to position marked by left-click (github #390).
  • Ensure that the target line is not obscured by a header line set by --header (github #444).
  • Change default character set to "utf-8", except remains "dos" on MS-DOS.
  • Add message when search with ^W wraps (github #459).
  • UCRT builds on Windows 10 and later now support Unicode file names (github #438).
  • Improve behavior of interrupt while reading non-terminated pipe (github #414).
  • Improve parsing of -j, -x and -# options (github #393).
  • Support files larger than 4GB on Windows (github #417).
  • Support entry of Unicode chars larger than U+FFFF on Windows (github #391).
  • Improve colors of bold, underline and standout text on Windows.
  • Allow --rscroll to accept non-ASCII characters (github #483).
  • Allow the parameter to certain options to be terminated with a space (--color, --quotes, --rscroll, --search-options and --intr) (github #495).
  • Fix bug where # substitution failed after viewing help (github #420).
  • Fix crash if files are deleted while less is viewing them (github #404).
  • Workaround unreliable ReadConsoleInputW behavior on Windows with non-ASCII input.
  • Fix -J display when searching for non-ASCII characters (github #422).
  • Don't filter header lines via the & command (github #423).
  • Fix bug when horizontally shifting long lines (github #425).
  • Add -x and -D options to lesstest, to make it easier to diagnose a failed lesstest run.
  • Fix bug searching long lines with --incsearch and -S (github #428).
  • Fix bug that made ESC-} fail if top line on screen was empty (github #429).
  • Fix bug with --mouse on Windows when used with pipes (github #440).
  • Fix bug in --+OPTION command line syntax.
  • Fix display bug when using -w with an empty line with a CR/LF line ending (github #474).
  • When substituting '#' or '%' with a filename, quote the filename if it contains a space (github #480).
  • Fix wrong sleep time when system has usleep but not nanosleep (github #489).
  • Fix bug when file name contains a newline (CVE-2024-32487,…

It was discovered that less mishandled newline characters in file names. If a user or automated system were tricked into opening specially crafted files, an attacker could possibly use this issue to execute arbitrary commands on the host.