Red Hat Security Advisory

RHSA-2024:3669

less security update

Released 2024-06-06 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2024-21380 CVE-2024-32487 · GHSA-f53j-pgm5-c4r3

MEDIUM 46

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00628 Published 2024-04-13 Partial fix CWE-96