Read the docs
TI-2022-24156 Aliases CVE-2022-48624GHSA-p647-4jrw-p827

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

Priority LOW 36CWE-78Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 6 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-78.

Summary

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01059 64th percentileScored 2026-11-07
Fix Partial Red Hat: 7 advisoriesRed Hat: 6 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:greenwoodsoftware:less:*:*:*:*:*:*:*:*before 606VulnerableGreenwoodsoftware
  • cpe:2.3:a:greenwoodsoftware:less:*:*:*:*:*:*:*:* Versions before 606 Vulnerable ·Greenwoodsoftware

Remediation

Red Hat 7 advisories

  • RHSA-2024:4256 Released 2024-07-02 · Red Hat rating Important
    less security update
    • Red Hat Enterprise Linux BaseOS (v. 8) less-530-3.el8_10
  • RHSA-2024:2092 Released 2024-05-01 · Red Hat rating Moderate
    security update Logging for Red Hat OpenShift - 5.6.18
    • RHOL 5.6 for RHEL 8 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-operator-bundle +15
  • RHSA-2024:2093 Released 2024-05-01 · Red Hat rating Moderate
    security update Logging for Red Hat OpenShift - 5.7.13
    • RHOL 5.7 for RHEL 8 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-operator-bundle +15
Show 4 more Red Hat advisories
  • RHSA-2024:1989 Released 2024-04-23 · Red Hat rating Moderate
    less security update
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) less-530-2.el8_6
  • RHSA-2024:1875 Released 2024-04-18 · Red Hat rating Moderate
    less security update
    • Red Hat Enterprise Linux BaseOS EUS (v.8.8) less-530-2.el8_8
  • RHSA-2024:1692 Released 2024-04-08 · Red Hat rating Moderate
    less security update
    • Red Hat Enterprise Linux BaseOS (v. 9) less-590-3.el9_3
  • RHSA-2024:1610 Released 2024-04-02 · Red Hat rating Moderate
    less security update
    • Red Hat Enterprise Linux BaseOS (v. 8) less-530-2.el8_9

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
RHOL 5.6 for RHEL 8Fixed RHSA-2024:2092
RHOL 5.7 for RHEL 8Fixed RHSA-2024:2093
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2024:1610, RHSA-2024:4256
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2024:1692
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2024:1989
Red Hat Enterprise Linux BaseOS EUS (v.8.8)Fixed RHSA-2024:1875

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-48624
  2. 2026-10-03 Alias added: GHSA-p647-4jrw-p827

References

Patch 2

Advisory 2

Other 1

  • TI-2024-21380 less through 653 allows OS command execution via a newline character in the name of a… CVSS 3.1HIGH 8.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences