Red Hat Security AdvisoryRHSA-2024:4416
less security update
Released 2024-07-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) less-530-2.el8_4
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) less-530-2.el8_4
- Red Hat Enterprise Linux BaseOS TUS (v.8.4) less-530-2.el8_4
Fixes 1 record
Priority MEDIUM 46
less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00628 · Published 2024-04-13 · Partial fix CWE-96