{"id":"CVE-2024-32487","aliases":["ALSA-2024:3513","ALSA-2024:4256","AZL-39914","AZL-39933","CLSA-2024-1715672446","CLSA-2024-1715672666","CLSA-2024-1715673429","CLSA-2024-1715673596","CLSA-2024-1715673753","CLSA-2024-1715946466","CLSA-2024-1715946971","CLSA-2024-1715947224","CLSA-2026-1777470383","CLSA-2026-1777471237","DEBIAN-CVE-2024-32487","DLA-3823-1","DSA-5679-1","EUVD-2024-30291","GHSA-f53j-pgm5-c4r3","MGASA-2024-0139","OESA-2024-1502","OESA-2024-1547","OESA-2024-1587","RHSA-2024:3513","RHSA-2024:3669","RHSA-2024:4256","RHSA-2024:4366","RHSA-2024:4369","RHSA-2024:4416","RHSA-2024:4418","RHSA-2024:4528","RHSA-2024:4529","RLSA-2024:3513","RLSA-2024:4256","ROOT-OS-ALPINE-319-CVE-2024-32487","ROOT-OS-ALPINE-320-CVE-2024-32487","SUSE-SU-2024:1534-1","SUSE-SU-2024:1550-1","SUSE-SU-2024:1598-1","SUSE-SU-2024:1598-2","SUSE-SU-2024:2060-1","SUSE-SU-2025:20007-1","SUSE-SU-2025:20394-1","UBUNTU-CVE-2024-32487","USN-6756-1","openSUSE-SU-2025:14862-1"],"status":"published","title":"less through 653 allows OS command execution via a newline character in the name of a file,...","description":"less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00628,"percentile":0.50368,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-96"],"published":"2024-04-13T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"less","fixed_in":["590-4.el9_4"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"less","fixed_in":["643-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"less","fixed_in":["590-4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"less","fixed_in":["590-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"less","fixed_in":["458-9.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"less","fixed_in":["530-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"less","fixed_in":["530-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"less","fixed_in":["481-2.1ubuntu0.2+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"less","fixed_in":["436-13.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"less","fixed_in":["436-13.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"less","fixed_in":["487-0.1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"less","fixed_in":["590-2.1~deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"less","fixed_in":["590-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"less","fixed_in":["590-2.1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"less","fixed_in":["632-1.2.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"less","fixed_in":["590-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"less","fixed_in":["590-6.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"less","fixed_in":["590-6.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"less","fixed_in":["590-6.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"less","fixed_in":["590-5.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"less","fixed_in":["590-6.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"less","fixed_in":["0:590-4.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"less-debuginfo","fixed_in":["0:590-4.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"less-debugsource","fixed_in":["0:590-4.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"less","fixed_in":["0:458-10.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"less-debuginfo","fixed_in":["0:458-10.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"less","fixed_in":["0:458-10.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"less-debuginfo","fixed_in":["0:458-10.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"less","fixed_in":["0:458-10.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"less-debuginfo","fixed_in":["0:458-10.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"less","fixed_in":["0:530-2.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"less-debuginfo","fixed_in":["0:530-2.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"less-debugsource","fixed_in":["0:530-2.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"less","fixed_in":["0:530-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"less-debuginfo","fixed_in":["0:530-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"less-debugsource","fixed_in":["0:530-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"less","fixed_in":["0:530-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"less-debuginfo","fixed_in":["0:530-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"less-debugsource","fixed_in":["0:530-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"less","fixed_in":["0:530-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"less-debuginfo","fixed_in":["0:530-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"less-debugsource","fixed_in":["0:530-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"less","fixed_in":["0:530-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"less-debuginfo","fixed_in":["0:530-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"less-debugsource","fixed_in":["0:530-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"less","fixed_in":["0:530-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"less-debuginfo","fixed_in":["0:530-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"less-debugsource","fixed_in":["0:530-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"less","fixed_in":["0:530-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"less-debuginfo","fixed_in":["0:530-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"less-debugsource","fixed_in":["0:530-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"less","fixed_in":["0:530-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"less-debuginfo","fixed_in":["0:530-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"less-debugsource","fixed_in":["0:530-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"less","fixed_in":["0:590-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"less-debuginfo","fixed_in":["0:590-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"less-debugsource","fixed_in":["0:590-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"less","fixed_in":["0:590-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"less-debuginfo","fixed_in":["0:590-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"less-debugsource","fixed_in":["0:590-3.el9_2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"less","fixed_in":["0:590-4.el9_4"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"less","fixed_in":["643-r20072","643-r20076","643-r20073","643-r20074","643-r20075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"rootio-less","fixed_in":["643-r20072","643-r20076","643-r20073","643-r20074","643-r20075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"less","fixed_in":["643-r20072","643-r20071","643-r20075","643-r20073","643-r20074","643-r20076"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"rootio-less","fixed_in":["643-r20072","643-r20071","643-r20075","643-r20073","643-r20074","643-r20076"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"less","fixed_in":["530-150000.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"less","fixed_in":["530-150000.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"less","fixed_in":["530-150000.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"less","fixed_in":["530-150000.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"less","fixed_in":["530-150000.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"less","fixed_in":["530-150000.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"less","fixed_in":["530-150000.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"less","fixed_in":["530-150000.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"less","fixed_in":["530-150000.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"less","fixed_in":["458-7.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"less","fixed_in":["458-7.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"less","fixed_in":["590-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"less","fixed_in":["590-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"less","fixed_in":["590-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"less","fixed_in":["590-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"less","fixed_in":["590-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"less","fixed_in":["590-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"less","fixed_in":["590-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"less","fixed_in":["590-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"less","fixed_in":["590-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"less","fixed_in":["590-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"less","fixed_in":["590-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"less","fixed_in":["590-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"less","fixed_in":["590-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"less","fixed_in":["643-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"less","fixed_in":["643-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"less","fixed_in":["633-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"less","fixed_in":["668-slfo.1.1_1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"less","fixed_in":["458-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"less","fixed_in":["481-2.1ubuntu0.2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"less","fixed_in":["487-0.1ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"less","fixed_in":["551-1ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"less","fixed_in":["590-1ubuntu0.22.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"less","fixed_in":["590-2ubuntu2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"less","fixed_in":["668-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-4.el9_4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-3.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:3","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"643-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-9.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-2.1ubuntu0.2+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"436-13.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"436-13.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"487-0.1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-10.el7_9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-10.el7_9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-2.1~deb12u2"}]}],"versions":["590-2","590-2+hurd.1","590-2.1~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-2.1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"487-0.1+deb10u1"}]}],"versions":["487-0.1"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"551-2+deb11u2"}]}],"versions":["551-2","551-2+deb11u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-2.1~deb12u2"}]}],"versions":["590-2","590-2+hurd.1","590-2.1~deb12u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"632-1.2.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-6.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-6.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-6.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-5.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-6.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-4.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-4.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-4.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:458-10.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:458-10.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:458-10.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:458-10.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:458-10.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:458-10.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"less-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"less-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-3.el9_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:590-4.el9_4"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:530-3.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"643-r20072"},{"fixed":"643-r20076"},{"fixed":"643-r20073"},{"fixed":"643-r20074"},{"fixed":"643-r20075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"rootio-less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"643-r20072"},{"fixed":"643-r20076"},{"fixed":"643-r20073"},{"fixed":"643-r20074"},{"fixed":"643-r20075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"643-r20072"},{"fixed":"643-r20071"},{"fixed":"643-r20075"},{"fixed":"643-r20073"},{"fixed":"643-r20074"},{"fixed":"643-r20076"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"rootio-less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"643-r20072"},{"fixed":"643-r20071"},{"fixed":"643-r20075"},{"fixed":"643-r20073"},{"fixed":"643-r20074"},{"fixed":"643-r20076"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"530-150000.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-7.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-7.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"643-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"643-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"633-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"668-slfo.1.1_1.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-2ubuntu0.1~esm1"}]}],"versions":["458-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-2.1ubuntu0.2+esm2"}]}],"versions":["458-3","458-3ubuntu1","481-2","481-2ubuntu1","481-2.1","481-2.1ubuntu0.1","481-2.1ubuntu0.2","481-2.1ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"487-0.1ubuntu0.1~esm2"}]}],"versions":["481-2.1ubuntu2","481-2.1ubuntu3","487-0.1","487-0.1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"551-1ubuntu0.3"}]}],"versions":["487-0.1build1","551-1","551-1ubuntu0.1","551-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-1ubuntu0.22.04.3"}]}],"versions":["551-2","551-2build1","590-1","590-1build1","590-1ubuntu0.22.04.1","590-1ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-2ubuntu2.1"}]}],"versions":["590-2","590-2ubuntu1","590-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"458-2ubuntu0.1~esm1"}]}],"versions":["458-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-2.1ubuntu0.2+esm2"}]}],"versions":["458-3","458-3ubuntu1","481-2","481-2ubuntu1","481-2.1","481-2.1ubuntu0.1","481-2.1ubuntu0.2","481-2.1ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"487-0.1ubuntu0.1~esm2"}]}],"versions":["481-2.1ubuntu2","481-2.1ubuntu3","487-0.1","487-0.1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"551-1ubuntu0.3"}]}],"versions":["487-0.1build1","551-1","551-1ubuntu0.1","551-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-1ubuntu0.22.04.3"}]}],"versions":["551-2","551-2build1","590-1","590-1build1","590-1ubuntu0.22.04.1","590-1ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"590-2ubuntu2.1"}]}],"versions":["590-2","590-2ubuntu1","590-2ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"668-2.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"greenwoodsoftware","product":"less"},{"vendor":"netapp","product":"bootstrap_os"},{"vendor":"netapp","product":"hci_storage_nodes"},{"vendor":"netapp","product":"less"},{"vendor":"netapp","product":"solidfire"}],"references":[{"url":"https://www.openwall.com/lists/oss-security/2024/04/13/2","tags":["x_transferred","Mailing List","Patch","web","article"]},{"url":"https://www.openwall.com/lists/oss-security/2024/04/12/5","tags":["x_transferred","Mailing List","web","article","report"]},{"url":"https://github.com/gwsw/less/commit/007521ac3c95bc76e3d59c6dbfe75d06c8075c33","tags":["x_transferred","Patch","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2024/04/15/1","tags":["mailing-list","x_transferred","Mailing List","article"]},{"url":"https://security.netapp.com/advisory/ntap-20240605-0009/","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/05/msg00018.html","tags":["mailing-list","x_transferred","Mailing List","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-32487","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240605-0009"},{"url":"https://github.com/advisories/GHSA-f53j-pgm5-c4r3"},{"url":"https://access.redhat.com/errata/RHSA-2024:3513","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-32487","tags":["report"]},{"url":"https://bugzilla.redhat.com/2274980","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-3513.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4256","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-48624","tags":["report"]},{"url":"https://bugzilla.redhat.com/2265081","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-4256.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1715672446.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1715672666.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1715673429.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1715673596.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1715673753.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2024-1715946466.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2024-1715946971.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1715947224.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777470383.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1777471237.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/32xxx/CVE-2024-32487.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-32487","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0139.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33102","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/04/12/6","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2024/04/15/1","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1502","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1547","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1587","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274980","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3513.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-32487","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3669","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3669.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265081","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4256.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-48624","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48624","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4366","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4366.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4369","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4369.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4416","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4416.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4418","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4418.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4528","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4528.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4529","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4529.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3513","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:4256","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241534-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1222849","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-32487","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241550-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241598-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241598-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242060-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520007-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520394-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047218","tags":["report"]},{"url":"https://bugzilla.suse.com/915387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-32487","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6756-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-32487","description":"less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.","status":"published","published":"2024-04-13T00:00:00Z","modified":"2024-08-02T02:13:39.027Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-96"],"updated_at":"2026-11-02T14:34:16.007021Z"}],"euvd":[{"id":"EUVD-2024-30291","description":"less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.","status":"published","published":"2024-04-13T00:00:00Z","modified":"2024-08-02T02:13:39Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:23.057649Z"}],"ghsa":[{"id":"GHSA-f53j-pgm5-c4r3","title":"less through 653 allows OS command execution via a newline character in the name of a file,...","description":"less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.","status":"published","published":"2024-04-13T15:34:58Z","modified":"2024-07-08T15:32:59Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-96"],"updated_at":"2026-11-02T14:57:39.292896Z"}],"nvd":[{"id":"CVE-2024-32487","description":"less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.","status":"published","published":"2024-04-13T15:15:52.683Z","modified":"2026-06-17T07:29:43.313Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-96"],"updated_at":"2026-11-02T14:09:50.299382Z"}],"osv":[{"id":"CVE-2024-32487","description":"less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.","status":"published","published":"2024-04-13T00:00:00Z","modified":"2026-10-28T10:43:50.398157763Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:40.391953Z"},{"id":"DEBIAN-CVE-2024-32487","description":"less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.","status":"published","published":"2024-04-13T15:15:52.683Z","modified":"2026-11-02T12:02:30.577938334Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:42.530184Z"},{"id":"OESA-2024-1502","title":"less security update","description":"Less is a pager. A pager is a program that displays text files. Other pagers commonly in use are more and pg. Pagers are often used in command-line environments like the Unix shell and the MS-DOS command prompt to display files.\r\n\r\nSecurity Fix(es):\r\n\r\nless through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.(CVE-2024-32487)","status":"published","published":"2024-04-26T11:06:56Z","modified":"2026-08-18T01:18:22.444677114Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1547","title":"less security update","description":"Less is a pager. A pager is a program that displays text files. Other pagers commonly in use are more and pg. Pagers are often used in command-line environments like the Unix shell and the MS-DOS command prompt to display files.\r\n\r\nSecurity Fix(es):\r\n\r\nless through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.(CVE-2024-32487)","status":"published","published":"2024-05-10T11:07:00Z","modified":"2026-08-18T01:18:25.311711161Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1587","title":"less security update","description":"Less is a pager. A pager is a program that displays text files. Other pagers commonly in use are more and pg. Pagers are often used in command-line environments like the Unix shell and the MS-DOS command prompt to display files.\r\n\r\nSecurity Fix(es):\r\n\r\nless through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.(CVE-2024-32487)","status":"published","published":"2024-05-17T11:07:02Z","modified":"2026-08-18T01:17:22.115654042Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"RHSA-2024:3513","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T19:09:43Z","modified":"2026-03-18T11:35:13.818847Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3669","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T19:09:52Z","modified":"2026-06-26T11:15:49Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:4256","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T19:10:00Z","modified":"2026-03-18T11:32:44.431743Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4366","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T19:10:09Z","modified":"2026-03-18T11:32:45.710094Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4369","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T19:10:17Z","modified":"2026-03-18T11:32:46.472798Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4416","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T19:10:26Z","modified":"2026-03-18T11:33:01.804233Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4418","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T19:10:35Z","modified":"2026-03-18T11:33:03.455598Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4528","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T19:10:52Z","modified":"2026-03-18T11:33:02.639907Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4529","title":"Red Hat Security Advisory: less security update","status":"published","published":"2024-09-16T19:10:44Z","modified":"2026-03-18T11:33:02.250058Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RLSA-2024:4256","title":"Important: less security update","description":"The \"less\" utility is a text file browser that resembles \"more\", but allows users to move backwards in the file as well as forwards. Since \"less\" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.\n\nSecurity Fix(es):\n\n* less: OS command injection (CVE-2024-32487)\n\n* less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-05-07T19:11:34.309952Z","modified":"2025-05-07T19:38:05.420924Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2024-32487","description":"less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.","status":"published","published":"2024-04-13T15:15:00Z","modified":"2026-02-04T02:57:42.138496Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:48.333535Z"},{"id":"ALSA-2024:3513","title":"Important: less security update","description":"The \"less\" utility is a text file browser that resembles \"more\", but allows users to move backwards in the file as well as forwards. Since \"less\" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.\n\nSecurity Fix(es):\n\n* less: OS command injection (CVE-2024-32487)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-30T00:00:00Z","modified":"2026-10-29T11:31:45.265254686Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:4256","title":"Important: less security update","description":"The \"less\" utility is a text file browser that resembles \"more\", but allows users to move backwards in the file as well as forwards. Since \"less\" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.\n\nSecurity Fix(es):\n\n* less: OS command injection (CVE-2024-32487)\n* less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-07-02T00:00:00Z","modified":"2026-10-29T11:02:21.35861829Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"AZL-39914","title":"CVE-2024-32487 affecting package less for versions less than 643-2","description":"less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.","status":"published","published":"2024-04-13T15:15:52Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:19.751978Z"},{"id":"AZL-39933","title":"CVE-2024-32487 affecting package less for versions less than 590-4","description":"less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.","status":"published","published":"2024-04-13T15:15:52Z","modified":"2026-04-21T04:28:51.908168Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"CLSA-2024-1715672446","title":"less: Fix of CVE-2024-32487","description":"- Fix CVE-2024-32487: filename.c: quoting mishandling.","status":"published","published":"2024-05-14T07:40:49Z","modified":"2026-06-01T00:30:06.086951469Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1715672666","title":"less: Fix of CVE-2024-32487","description":"- CVE-2024-32487: filename.c: quoting mishandling.","status":"published","published":"2024-05-14T07:44:29Z","modified":"2026-06-01T00:33:04.588821378Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1715673429","title":"less: Fix of CVE-2024-32487","description":"- Fix CVE-2024-32487: filename.c: quoting mishandling.","status":"published","published":"2024-05-14T07:57:12Z","modified":"2026-06-01T00:31:55.025507244Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1715673596","title":"less: Fix of CVE-2024-32487","description":"- Fix CVE-2024-32487: filename.c: quoting mishandling.","status":"published","published":"2024-05-14T07:59:59Z","modified":"2026-06-01T00:33:22.446069283Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1715673753","title":"Fix CVE(s): CVE-2024-32487","description":"   * SECURITY UPDATE: quoting is mishandled in filename.c.\n     - debian/patches/CVE-2024-32487.patch: Fix bug when viewing a file\n       whose name contains a newline.\n     - CVE-2024-32487","status":"published","published":"2024-05-14T08:02:36Z","modified":"2026-06-04T10:04:11.909676Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1715946466","title":"less: Fix of CVE-2024-32487","description":"- CVE-2024-32487: filename.c: quoting mishandling","status":"published","published":"2024-05-17T11:47:49Z","modified":"2026-06-01T00:33:16.092579627Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1715946971","title":"less: Fix of CVE-2024-32487","description":"- CVE-2024-32487: filename.c: quoting mishandling","status":"published","published":"2024-05-17T11:56:14Z","modified":"2026-06-01T00:33:25.834965779Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1715947224","title":"Fix CVE(s): CVE-2024-32487","description":"   * SECURITY UPDATE: quoting is mishandled in filename.c.\n     - debian/patches/CVE-2024-32487.patch: Fix bug when viewing a file\n       whose name contains a newline.\n     - CVE-2024-32487","status":"published","published":"2024-05-17T12:00:27Z","modified":"2026-06-04T10:04:04.649826Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2026-1777470383","title":"less: Fix of 2 CVEs","description":"- Extend ELS coverage to rhel7els, oraclelinux7els and cloudlinux7els.\n- CVE-2022-48624 and CVE-2024-32487 were already fixed in 458-10.tuxcare.els1;\n  this release reships those fixes to the additional platforms.","status":"published","published":"2026-04-29T13:46:28Z","modified":"2026-06-01T00:33:08.197564616Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777471237","title":"less: Fix of 2 CVEs","description":"- Extend ELS coverage to rhel7els, oraclelinux7els and cloudlinux7els.\n- CVE-2022-48624 and CVE-2024-32487 were already fixed in 458-10.tuxcare.els1;\n  this release reships those fixes to the additional platforms.","status":"published","published":"2026-04-29T14:00:42Z","modified":"2026-06-01T00:33:20.152661006Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-3823-1","title":"less - security update","status":"published","published":"2024-05-27T00:00:00Z","modified":"2026-03-09T01:18:33.060611Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5679-1","title":"less - security update","status":"published","published":"2024-05-03T00:00:00Z","modified":"2026-03-09T02:08:31.336523Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0139","title":"Updated less packages fix security vulnerability","description":"less through 653 allows OS command execution via a newline character in\nthe name of a file, because quoting is mishandled in filename.c.\nExploitation typically requires use with attacker-controlled file names,\nsuch as the files extracted from an untrusted archive. Exploitation also\nrequires the LESSOPEN environment variable, but this is set by default\nin many common cases. (CVE-2024-32487)\n","status":"published","published":"2024-04-19T01:16:42Z","modified":"2026-04-16T04:44:31.142351205Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2025:14862-1","title":"less-668-2.1 on GA media","description":"These are all security issues fixed in the less-668-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-07T00:00:00Z","modified":"2026-02-04T02:41:48.892371Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"RLSA-2024:3513","title":"Important: less security update","description":"The \"less\" utility is a text file browser that resembles \"more\", but allows users to move backwards in the file as well as forwards. Since \"less\" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.\n\nSecurity Fix(es):\n\n* less: OS command injection (CVE-2024-32487)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-06-14T14:00:33.093068Z","modified":"2026-02-05T00:30:14.66694Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"ROOT-OS-ALPINE-319-CVE-2024-32487","title":"CVE-2024-32487 in less - Patched by Root","description":"Root has patched CVE-2024-32487 in the less package for Root:Alpine:3.19. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:32:27Z","modified":"2026-09-29T10:15:11.85070927Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-ALPINE-320-CVE-2024-32487","title":"CVE-2024-32487 in less - Patched by Root","description":"Root has patched CVE-2024-32487 in the less package for Root:Alpine:3.20. Multiple fixed versions available.","status":"published","published":"2026-09-29T10:10:52Z","modified":"2026-09-29T11:15:09.196083524Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"SUSE-SU-2024:1534-1","title":"Security update for less","description":"This update for less fixes the following issues:\n\n- CVE-2024-32487: Fixed mishandling of \\n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)\n","status":"published","published":"2024-05-06T12:55:36Z","modified":"2026-02-04T02:54:14.212548Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1550-1","title":"Security update for less","description":"This update for less fixes the following issues:\n\n- CVE-2024-32487: Fixed mishandling of \\n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)\n","status":"published","published":"2024-05-07T14:23:51Z","modified":"2026-02-04T03:33:00.155947Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1598-1","title":"Security update for less","description":"This update for less fixes the following issues:\n\n- CVE-2024-32487: Fixed mishandling of \\n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)\n","status":"published","published":"2024-05-10T09:50:38Z","modified":"2026-02-04T04:11:51.940333Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1598-2","title":"Security update for less","description":"This update for less fixes the following issues:\n\n- CVE-2024-32487: Fixed mishandling of \\n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)\n","status":"published","published":"2024-05-10T09:50:50Z","modified":"2026-02-04T03:09:30.22099Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:2060-1","title":"Security update for less","description":"This update for less fixes the following issues:\n\n- CVE-2024-32487: Fixed OS command injection via a newline character in the file name. (bsc#1222849)\n","status":"published","published":"2024-06-18T11:11:48Z","modified":"2026-02-04T04:36:57.623038Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2025:20007-1","title":"Security update for less","description":"This update for less fixes the following issues:\n\n- CVE-2024-32487: Fix a bug where mishandling of \\n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)\n","status":"published","published":"2025-02-03T08:47:04Z","modified":"2026-03-23T04:47:06.09484Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20394-1","title":"Security update for less","description":"This update for less fixes the following issues:\n\n- Updated to version 668\n  * Fixed crash when using --header on command line\n  * Fixed possible crash when scrolling left/right or toggling -S\n  * Fixed bug when using #stop in a lesskey file\n  * Fixed bug when using --shift or --match-shift on command line with a parameter starting with '.'\n  * Fixed bug in R command when file size changes\n  * Fixed bug using --header when file does not fill screen\n  * Fixed ^X bug when output is not a terminal\n  * Fixed bug where ^Z is not handled immediately\n  * Fixed bug where first byte from a LESSOPEN filter is deleted if it is greater than 0x7F\n  * Fixed uninitialized variable in edit_ifile\n  * Fixed incorrect handling of UTF-8 chars in prompts\n\n- Change preprocessor dependencies from Requires to Recommends. It's disabled by\n  default and they are not necessary for less.\n\n- Updated to version 661:\n  * fixed crash - buffer overflow by one in fexpand\n  * fixed free(): double free detected in tcache 2\n  * fixed segmentation fault on line-num-width \u0026 -N\n\n- Updated to version 656:\n  * Add ^O^N, ^O^P, ^O^L and ^O^O commands and mouse clicks (with --mouse) to find and open OSC8 hyperlinks (github #251).\n  * Add --match-shift option.\n  * Add --lesskey-content option (github #447).\n  * Add LESSKEY_CONTENT environment variable (github #447).\n  * Add --no-search-header-lines and --no-search-header-columns options (github #397).\n  * Add ctrl-L search modifier (github #367).\n  * A ctrl-P at the start of a shell command suppresses the \"done\" message (github #462).\n  * Add attribute characters ('*', '~', '_', '\u0026') to --color parameter (github #471).\n  * Allow expansion of environment variables in lesskey files.\n  * Add LESSSECURE_ALLOW environment variable (github #449).\n  * Add LESS_UNSUPPORT environment variable.\n  * Add line number parameter to --header option (github #436).\n  * Mouse right-click jumps to position marked by left-click (github #390).\n  * Ensure that the target line is not obscured by a header line set by --header (github #444).\n  * Change default character set to \"utf-8\", except remains \"dos\" on MS-DOS.\n  * Add message when search with ^W wraps (github #459).\n  * UCRT builds on Windows 10 and later now support Unicode file names (github #438).\n  * Improve behavior of interrupt while reading non-terminated pipe (github #414).\n  * Improve parsing of -j, -x and -# options (github #393).\n  * Support files larger than 4GB on Windows (github #417).\n  * Support entry of Unicode chars larger than U+FFFF on Windows (github #391).\n  * Improve colors of bold, underline and standout text on Windows.\n  * Allow --rscroll to accept non-ASCII characters (github #483).\n  * Allow the parameter to certain options to be terminated with a space (--color, --quotes, --rscroll, --search-options and --intr) (github #495).\n  * Fix bug where # substitution failed after viewing help (github #420).\n  * Fix crash if files are deleted while less is viewing them (github #404).\n  * Workaround unreliable ReadConsoleInputW behavior on Windows with non-ASCII input.\n  * Fix -J display when searching for non-ASCII characters (github #422).\n  * Don't filter header lines via the \u0026 command (github #423).\n  * Fix bug when horizontally shifting long lines (github #425).\n  * Add -x and -D options to lesstest, to make it easier to diagnose a failed lesstest run.\n  * Fix bug searching long lines with --incsearch and -S (github #428).\n  * Fix bug that made ESC-} fail if top line on screen was empty (github #429).\n  * Fix bug with --mouse on Windows when used with pipes (github #440).\n  * Fix bug in --+OPTION command line syntax.\n  * Fix display bug when using -w with an empty line with a CR/LF line ending (github #474).\n  * When substituting '#' or '%' with a filename, quote the filename if it contains a space (github #480).\n  * Fix wrong sleep time when system has usleep but not nanosleep (github #489).\n  * Fix bug when file name contains a newline (CVE-2024-32487, bsc#1222849).\n  * Fix bug when file name contains nonprintable characters (github #503).\n  * Fix DJGPP build (github #497).\n  * Update Unicode tables.\n\n- add zstd support to lessopen\n\n- Updated to 643:\n  * Fixed problem when a program piping into less reads from the tty,\n    like sudo asking for password (github #368).\n  * Fixed search modifier ^E after ^W.\n  * Fixed bug using negated (^N) search (github #374).\n  * Fixed bug setting colors with -D on Windows build (github #386).\n  * Fixed reading special chars like PageDown on Windows (github #378).\n  * Fixed mouse wheel scrolling on Windows (github #379).\n  * Fixed erroneous EOF when terminal window size changes (github #372).\n  * Fixed compile error with some definitions of ECHONL (github #395).\n  * Fixed crash on Windows when writing logfile (github #405).\n  * Fixed regression in exit code when stdin is /dev/null and\n    output is a file (github #373).\n  * Add lesstest test suite to production release (github #344).\n  * Change lesstest output to conform with\n    automake Simple Test Format (github #399).\n","status":"published","published":"2025-06-08T13:39:10Z","modified":"2026-03-23T04:50:07.770684Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"USN-6756-1","title":"less vulnerability","description":"It was discovered that less mishandled newline characters in file names. If\na user or automated system were tricked into opening specially crafted\nfiles, an attacker could possibly use this issue to execute arbitrary\ncommands on the host.\n","status":"published","published":"2024-04-29T10:18:57Z","modified":"2026-06-29T13:51:09.88255931Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}