Read the docs
TI-2024-21380 Aliases CVE-2024-32487GHSA-f53j-pgm5-c4r3

less through 653 allows OS command execution via a newline character in the name of a…

Priority MEDIUM 46CWE-96Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 15 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00628 50th percentileScored 2026-11-07
Fix Partial Red Hat: 9 advisoriesRed Hat: 15 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:a:greenwoodsoftware:less:*:*:*:*:*:*:*:*up to 653VulnerableGreenwoodsoftware
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:a:netapp:hci_storage_nodes:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
  • cpe:2.3:a:greenwoodsoftware:less:*:*:*:*:*:*:*:* Versions up to 653 Vulnerable ·Greenwoodsoftware
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:a:netapp:hci_storage_nodes:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp

Remediation

Red Hat 9 advisories

  • RHSA-2024:4529 Released 2024-07-15 · Red Hat rating Important
    less security update
    • Red Hat Enterprise Linux BaseOS EUS (v.9.2) less-590-3.el9_2
  • RHSA-2024:4528 Released 2024-07-15 · Red Hat rating Important
    less security update
    • Red Hat Enterprise Linux BaseOS E4S (v.9.0) less-590-2.el9_0
  • RHSA-2024:4418 Released 2024-07-09 · Red Hat rating Important
    less security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) less-530-3.el8_6
    • Red Hat Enterprise Linux BaseOS E4S (v.8.6) less-530-3.el8_6
    • Red Hat Enterprise Linux BaseOS TUS (v.8.6) less-530-3.el8_6
Show 6 more Red Hat advisories
  • RHSA-2024:4416 Released 2024-07-09 · Red Hat rating Important
    less security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) less-530-2.el8_4
    • Red Hat Enterprise Linux BaseOS E4S (v.8.4) less-530-2.el8_4
    • Red Hat Enterprise Linux BaseOS TUS (v.8.4) less-530-2.el8_4
  • RHSA-2024:4369 Released 2024-07-08 · Red Hat rating Important
    less security update
    • Red Hat Enterprise Linux BaseOS EUS (v.8.8) less-530-3.el8_8
  • RHSA-2024:4366 Released 2024-07-08 · Red Hat rating Important
    less security update
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) less-530-2.el8_2
  • RHSA-2024:4256 Released 2024-07-02 · Red Hat rating Important
    less security update
    • Red Hat Enterprise Linux BaseOS (v. 8) less-530-3.el8_10
  • RHSA-2024:3669 Released 2024-06-06 · Red Hat rating Important
    less security update
    • Red Hat Enterprise Linux Client (v. 7) less-458-10.el7_9
    • Red Hat Enterprise Linux Server (v. 7) less-458-10.el7_9
    • Red Hat Enterprise Linux Workstation (v. 7) less-458-10.el7_9
  • RHSA-2024:3513 Released 2024-05-30 · Red Hat rating Important
    less security update
    • Red Hat Enterprise Linux BaseOS (v. 9) less-590-4.el9_4

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2024:4256
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2024:3513
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2024:4366
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2024:4416
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2024:4418
Red Hat Enterprise Linux BaseOS E4S (v.8.4)Fixed RHSA-2024:4416
Red Hat Enterprise Linux BaseOS E4S (v.8.6)Fixed RHSA-2024:4418
Red Hat Enterprise Linux BaseOS E4S (v.9.0)Fixed RHSA-2024:4528
Red Hat Enterprise Linux BaseOS EUS (v.8.8)Fixed RHSA-2024:4369
Red Hat Enterprise Linux BaseOS EUS (v.9.2)Fixed RHSA-2024:4529
Red Hat Enterprise Linux BaseOS TUS (v.8.4)Fixed RHSA-2024:4416
Red Hat Enterprise Linux BaseOS TUS (v.8.6)Fixed RHSA-2024:4418
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2024:3669
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2024:3669
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2024:3669
Not affected: 1 product
  • Red Hat Enterprise Linux 10

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-32487
  2. 2026-10-03 Alias added: GHSA-f53j-pgm5-c4r3
  3. 2026-10-30 EPSS moved to the 50th–90th percentile

References

Patch 2

Advisory 1

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences