{"id":"CVE-2022-48624","aliases":["ALSA-2024:1610","ALSA-2024:1692","ALSA-2024:4256","AZL-34458","CLSA-2024-1713523278","CLSA-2024-1713523598","CLSA-2024-1713523762","CLSA-2024-1714065925","CLSA-2024-1714066220","CLSA-2024-1716271951","CLSA-2024-1716272169","CLSA-2024-1716272273","CLSA-2026-1777470383","CLSA-2026-1777471237","DEBIAN-CVE-2022-48624","DLA-3823-1","DSA-5679-1","EUVD-2022-51319","GHSA-p647-4jrw-p827","OESA-2024-1219","RHSA-2024:1610","RHSA-2024:1692","RHSA-2024:1875","RHSA-2024:1989","RHSA-2024:4256","RLSA-2024:1610","RLSA-2024:1692","RLSA-2024:4256","SUSE-SU-2024:1189-1","SUSE-SU-2024:1190-1","SUSE-SU-2024:1192-1","UBUNTU-CVE-2022-48624","USN-6664-1","USN-8079-1"],"status":"published","title":"close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.","description":"close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01059,"percentile":0.64772,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-78"],"published":"2024-02-19T00:00:00Z","modified":"2026-11-03T08:02:31Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"less","fixed_in":["530-2.el8_9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"less","fixed_in":["590-3.el9_3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"less","fixed_in":["590-3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"less","fixed_in":["436-13.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"less","fixed_in":["436-13.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"less","fixed_in":["481-2.1ubuntu0.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"less","fixed_in":["458-9.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"less","fixed_in":["487-0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"less","fixed_in":["590-2.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"less","fixed_in":["530-1.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"less","fixed_in":["530-1.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"less","fixed_in":["590-2.1~deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"less","fixed_in":["590-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"less","fixed_in":["590-2.1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"less","fixed_in":["590-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"less","fixed_in":["590-3.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"less","fixed_in":["590-5.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"less","fixed_in":["590-5.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"less","fixed_in":["590-5.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"less","fixed_in":["590-5.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"less","fixed_in":["0:530-2.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"less-debuginfo","fixed_in":["0:530-2.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"less-debugsource","fixed_in":["0:530-2.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"less","fixed_in":["0:590-3.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"less-debuginfo","fixed_in":["0:590-3.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"less-debugsource","fixed_in":["0:590-3.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"less","fixed_in":["0:530-2.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"less-debuginfo","fixed_in":["0:530-2.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"less-debugsource","fixed_in":["0:530-2.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"less","fixed_in":["0:530-2.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"less-debuginfo","fixed_in":["0:530-2.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"less-debugsource","fixed_in":["0:530-2.el8_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"less","fixed_in":["0:530-2.el8_9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"less","fixed_in":["0:590-3.el9_3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"less","fixed_in":["458-7.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"less","fixed_in":["458-7.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"less","fixed_in":["530-150000.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"less","fixed_in":["530-150000.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"less","fixed_in":["530-150000.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"less","fixed_in":["530-150000.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"less","fixed_in":["530-150000.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"less","fixed_in":["530-150000.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"less","fixed_in":["530-150000.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"less","fixed_in":["530-150000.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"less","fixed_in":["530-150000.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"less","fixed_in":["590-150400.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"less","fixed_in":["590-150400.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"less","fixed_in":["590-150400.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"less","fixed_in":["590-150400.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"less","fixed_in":["590-150400.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"less","fixed_in":["590-150400.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"less","fixed_in":["590-150400.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"less","fixed_in":["590-150400.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"less","fixed_in":["590-150400.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"less","fixed_in":["590-150400.3.6.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"less","fixed_in":["590-150400.3.6.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"less","fixed_in":["590-150400.3.6.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"less","fixed_in":["590-150400.3.6.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"less","fixed_in":["458-2ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"less","fixed_in":["481-2.1ubuntu0.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"less","fixed_in":["487-0.1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"less","fixed_in":["551-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"less","fixed_in":["590-1ubuntu0.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"less","fixed_in":["590-2ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-2.el8_9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-3.el9_3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-3.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"436-13.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"436-13.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-2.1ubuntu0.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-9.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"487-0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-2.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-1.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-1.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-10.el7_9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-10.el7_9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-2.1~deb12u2"}]}],"versions":["590-2","590-2+hurd.1","590-2.1~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-2.1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"487-0.1+deb10u1"}]}],"versions":["487-0.1"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"551-2+deb11u2"}]}],"versions":["551-2","551-2+deb11u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-2.1~deb12u2"}]}],"versions":["590-2","590-2+hurd.1","590-2.1~deb12u1"],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-3.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-5.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-5.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-5.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-5.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-3.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-3.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-3.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-3.el9_3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-7.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-7.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.6.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.6.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.6.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.6.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-2ubuntu0.1~esm2"}]}],"versions":["458-2","458-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-2.1ubuntu0.2+esm1"}]}],"versions":["458-3","458-3ubuntu1","481-2","481-2ubuntu1","481-2.1","481-2.1ubuntu0.1","481-2.1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"487-0.1ubuntu0.1~esm1"}]}],"versions":["481-2.1ubuntu2","481-2.1ubuntu3","487-0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"551-1ubuntu0.2"}]}],"versions":["487-0.1build1","551-1","551-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-1ubuntu0.22.04.2"}]}],"versions":["551-2","551-2build1","590-1","590-1build1","590-1ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-2ubuntu1"}]}],"versions":["590-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-2.1ubuntu0.2+esm1"}]}],"versions":["458-3","458-3ubuntu1","481-2","481-2ubuntu1","481-2.1","481-2.1ubuntu0.1","481-2.1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"487-0.1ubuntu0.1~esm1"}]}],"versions":["481-2.1ubuntu2","481-2.1ubuntu3","487-0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"551-1ubuntu0.2"}]}],"versions":["487-0.1build1","551-1","551-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-1ubuntu0.22.04.2"}]}],"versions":["551-2","551-2build1","590-1","590-1build1","590-1ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-2ubuntu0.1~esm2"}]}],"versions":["458-2","458-2ubuntu0.1~esm1"]}],"products":[{"vendor":"greenwoodsoftware","product":"less"}],"references":[{"url":"https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144","tags":["x_transferred","Patch","fix"]},{"url":"https://greenwoodsoftware.com/less/","tags":["x_transferred","Release Notes","web"]},{"url":"https://github.com/gwsw/less/compare/v605...v606","tags":["x_transferred","Patch","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20240605-0010/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/05/msg00018.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48624","tags":["web","advisory"]},{"url":"https://greenwoodsoftware.com/less"},{"url":"https://security.netapp.com/advisory/ntap-20240605-0010"},{"url":"https://github.com/advisories/GHSA-p647-4jrw-p827"},{"url":"https://access.redhat.com/errata/RHSA-2024:1610","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-48624","tags":["report"]},{"url":"https://bugzilla.redhat.com/2265081","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-1610.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1692","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-1692.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4256","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-32487","tags":["report"]},{"url":"https://bugzilla.redhat.com/2274980","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-4256.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2024-1713523278.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2024-1713523598.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1713523762.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1714065925.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1714066220.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1716271951.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1716272169.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1716272273.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777470383.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1777471237.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48624.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-48624","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1219","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265081","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1610.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-48624","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1692.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1875","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1875.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1989","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1989.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274980","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4256.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-32487","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-32487","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2024/04/12/5","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2024/04/13/2","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2024:1610","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:1692","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:4256","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241189-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219901","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48624","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241190-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241192-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-48624","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6664-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8079-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-48624","description":"close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.","status":"published","published":"2024-02-19T00:00:00Z","modified":"2025-03-27T14:21:35.466Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:34:33.913527Z"}],"euvd":[{"id":"EUVD-2022-51319","description":"close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.","status":"published","published":"2024-02-19T00:00:00Z","modified":"2025-03-27T14:21:35Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:49.948923Z"}],"ghsa":[{"id":"GHSA-p647-4jrw-p827","title":"close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.","description":"close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.","status":"published","published":"2024-02-19T03:30:24Z","modified":"2025-03-27T15:31:56Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:00:29.248113Z"}],"nvd":[{"id":"CVE-2022-48624","description":"close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.","status":"published","published":"2024-02-19T01:15:48.643Z","modified":"2026-06-17T05:15:44.817Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:07:40.49892Z"}],"osv":[{"id":"AZL-34458","title":"CVE-2022-48624 affecting package less for versions less than 590-3","description":"close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.","status":"published","published":"2024-02-19T01:15:48Z","modified":"2026-04-21T04:27:07.931Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"CVE-2022-48624","description":"close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.","status":"published","published":"2024-02-19T00:00:00Z","modified":"2026-10-28T10:31:31.298018407Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:27.776402Z"},{"id":"DEBIAN-CVE-2022-48624","description":"close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.","status":"published","published":"2024-02-19T01:15:48.643Z","modified":"2026-11-03T08:02:31.023812288Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"OESA-2024-1219","title":"less security update","description":"Less is a pager. A pager is a program that displays text files. Other pagers commonly in use are more and pg. Pagers are often used in command-line environments like the Unix shell and the MS-DOS command prompt to display files.\r\n\r\nSecurity Fix(es):\r\n\r\nclose_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.(CVE-2022-48624)","status":"published","published":"2024-03-01T11:06:40Z","modified":"2026-08-18T01:18:17.413208693Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:1610","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T18:04:23Z","modified":"2026-03-18T11:34:54.225331Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1692","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T18:04:32Z","modified":"2026-03-18T11:34:57.560136Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1875","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T18:04:40Z","modified":"2026-03-18T11:34:57.338556Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:1989","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T18:04:49Z","modified":"2026-03-18T11:35:00.451476Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:4256","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T19:10:00Z","modified":"2026-03-18T11:32:44.431743Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RLSA-2024:4256","title":"Important: less security update","description":"The \"less\" utility is a text file browser that resembles \"more\", but allows users to move backwards in the file as well as forwards. Since \"less\" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.\n\nSecurity Fix(es):\n\n* less: OS command injection (CVE-2024-32487)\n\n* less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-05-07T19:11:34.309952Z","modified":"2025-05-07T19:38:05.420924Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2022-48624","description":"close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.","status":"published","published":"2024-02-19T01:15:00Z","modified":"2026-03-09T11:29:07.244403Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:56.473586Z"},{"id":"ALSA-2024:1610","title":"Moderate: less security update","description":"The \"less\" utility is a text file browser that resembles \"more\", but allows users to move backwards in the file as well as forwards. Since \"less\" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.\n\nSecurity Fix(es):\n\n* less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-02T00:00:00Z","modified":"2026-10-29T11:02:27.738531584Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:1692","title":"Moderate: less security update","description":"The \"less\" utility is a text file browser that resembles \"more\", but allows\nusers to move backwards in the file as well as forwards. Since \"less\" does not\nread the entire input file at startup, it also starts more quickly than ordinary\ntext editors.\n\nSecurity Fix(es):\n\n* less: missing quoting of shell metacharacters in LESSCLOSE handling\n(CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-08T00:00:00Z","modified":"2026-10-29T11:31:06.737055109Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:4256","title":"Important: less security update","description":"The \"less\" utility is a text file browser that resembles \"more\", but allows users to move backwards in the file as well as forwards. Since \"less\" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.\n\nSecurity Fix(es):\n\n* less: OS command injection (CVE-2024-32487)\n* less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-07-02T00:00:00Z","modified":"2026-10-29T11:02:21.35861829Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2024-1713523278","title":"less: Fix of CVE-2022-48624","description":"- CVE-2022-48624: shell-quote filenames when invoking LESSCLOSE","status":"published","published":"2024-04-19T10:41:21Z","modified":"2026-06-01T00:33:16.137513237Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1713523598","title":"less: Fix of CVE-2022-48624","description":"- CVE-2022-48624: shell-quote filenames when invoking LESSCLOSE","status":"published","published":"2024-04-19T10:46:40Z","modified":"2026-06-01T00:33:25.832200202Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1713523762","title":"Fix CVE(s): CVE-2022-48624","description":"   * SECURITY UPDATE: shell-quote filenames when invoking LESSCLOSE.\n     - debian/patches/CVE-2022-48624.patch: Fix close_altfile in filename.c\n       in less before 606 omits shell_quote calls for LESSCLOSE.\n     - CVE-2022-48624","status":"published","published":"2024-04-19T10:49:24Z","modified":"2026-06-04T10:03:39.738864Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1714065925","title":"less: Fix of CVE-2022-48624","description":"- Fix CVE-2022-48624: filename.c (close_altfile): before 606 omits shell_quote\n  calls for LESSCLOSE.","status":"published","published":"2024-04-25T17:25:27Z","modified":"2026-06-01T00:33:04.64732128Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1714066220","title":"Fix CVE(s): CVE-2022-48624","description":"   * SECURITY UPDATE: shell-quote filenames when invoking LESSCLOSE.\n     - debian/patches/CVE-2022-48624.patch: Fix close_altfile in filename.c\n       in less before 606 omits shell_quote calls for LESSCLOSE.\n     - CVE-2022-48624","status":"published","published":"2024-04-25T17:30:22Z","modified":"2026-06-04T10:03:39.200544Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1716271951","title":"less: Fix of CVE-2022-48624","description":"- CVE-2022-48624: shell-quote filenames when invoking LESSCLOSE.","status":"published","published":"2024-05-21T06:12:35Z","modified":"2026-06-01T00:30:07.279898897Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1716272169","title":"less: Fix of CVE-2022-48624","description":"- CVE-2022-48624: filename.c: shell-quote filenames when invoking LESSCLOSE.","status":"published","published":"2024-05-21T06:16:12Z","modified":"2026-06-01T00:33:19.367048086Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1716272273","title":"less: Fix of CVE-2022-48624","description":"- CVE-2022-48624: filename.c: shell-quote filenames when invoking LESSCLOSE.","status":"published","published":"2024-05-21T06:17:56Z","modified":"2026-06-01T00:33:22.482935497Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2026-1777470383","title":"less: Fix of 2 CVEs","description":"- Extend ELS coverage to rhel7els, oraclelinux7els and cloudlinux7els.\n- CVE-2022-48624 and CVE-2024-32487 were already fixed in 458-10.tuxcare.els1;\n  this release reships those fixes to the additional platforms.","status":"published","published":"2026-04-29T13:46:28Z","modified":"2026-06-01T00:33:08.197564616Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777471237","title":"less: Fix of 2 CVEs","description":"- Extend ELS coverage to rhel7els, oraclelinux7els and cloudlinux7els.\n- CVE-2022-48624 and CVE-2024-32487 were already fixed in 458-10.tuxcare.els1;\n  this release reships those fixes to the additional platforms.","status":"published","published":"2026-04-29T14:00:42Z","modified":"2026-06-01T00:33:20.152661006Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-3823-1","title":"less - security update","status":"published","published":"2024-05-27T00:00:00Z","modified":"2026-03-09T01:18:33.060611Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5679-1","title":"less - security update","status":"published","published":"2024-05-03T00:00:00Z","modified":"2026-03-09T02:08:31.336523Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"RLSA-2024:1610","title":"Moderate: less security update","description":"The \"less\" utility is a text file browser that resembles \"more\", but allows users to move backwards in the file as well as forwards. Since \"less\" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.\n\nSecurity Fix(es):\n\n* less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-05T14:55:53.600745Z","modified":"2026-02-05T08:15:12.563616Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2024:1692","title":"Moderate: less security update","description":"The \"less\" utility is a text file browser that resembles \"more\", but allows\nusers to move backwards in the file as well as forwards. Since \"less\" does not\nread the entire input file at startup, it also starts more quickly than ordinary\ntext editors.\n\nSecurity Fix(es):\n\n* less: missing quoting of shell metacharacters in LESSCLOSE handling\n(CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-10T14:32:36.204878Z","modified":"2026-02-04T16:00:10.812512Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2024:1189-1","title":"Security update for less","description":"This update for less fixes the following issues:\n  \n- CVE-2022-48624: Fixed LESSCLOSE handling in less that does not quote shell metacharacters (bsc#1219901).\n","status":"published","published":"2024-04-10T01:28:09Z","modified":"2026-02-04T04:37:34.138112Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:1190-1","title":"Security update for less","description":"This update for less fixes the following issues:\n\n- CVE-2022-48624: Fixed LESSCLOSE handling in less that does not quote shell metacharacters (bsc#1219901).\n","status":"published","published":"2024-04-10T01:28:50Z","modified":"2026-02-04T04:06:43.406924Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:1192-1","title":"Security update for less","description":"This update for less fixes the following issues:\n\n- CVE-2022-48624: Fixed LESSCLOSE handling in less that does not quote shell metacharacters (bsc#1219901).\n","status":"published","published":"2024-04-10T07:14:39Z","modified":"2026-02-04T02:16:37.836921Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"USN-6664-1","title":"less vulnerability","description":"It was discovered that less incorrectly handled certain file names.\nAn attacker could possibly use this issue to cause a crash or execute\narbitrary commands.\n","status":"published","published":"2024-02-27T16:47:13Z","modified":"2026-06-25T13:32:25.673497587Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-8079-1","title":"less vulnerability","description":"It was discovered that less incorrectly handled certain file names. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary commands.","status":"published","published":"2026-03-05T22:30:55Z","modified":"2026-03-09T11:31:01.684058Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}