HIGH 8.6 Microsoft
CVE-2024-32487
less through 653 allows OS command execution via a newline character in the name of a file because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable but this is set by default in many common cases.
Microsoft Security Update 2024-Apr: less through 653 allows OS command execution via a newline character in the name of a file because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable but this is set by default in many common cases.
Affected Products
- azl3 less 643-2 on Azure Linux 3.0
- cbl2 less 590-4 on CBL Mariner 2.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-32487
- https://nvd.nist.gov/vuln/detail/CVE-2024-32487
This high severity vulnerability with a CVSS score of 8.6 was published on 2024-04-09 via Microsoft. Affected: azl3 less 643-2 on Azure Linux 3.0, cbl2 less 590-4 on CBL Mariner 2.0.
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.