CVE-2024-32487: High severity gwsw less vulnerability
less could allow a remote attacker to execute arbitrary commands on the system. By using a newline character in the name of a file, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
Other sources
less through 653 allows OS command execution via a newline character in the name of a file because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable but this is set by default in many common cases.
— Microsoft
less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32487?
CVE-2024-32487 has been assigned a moderate severity level due to its potential for OS command execution.
How do I fix CVE-2024-32487?
To fix CVE-2024-32487, upgrade the 'less' package to version 654 or later.
Who is affected by CVE-2024-32487?
CVE-2024-32487 affects all users of the 'less' software version 653 and earlier.
What type of vulnerability is CVE-2024-32487?
CVE-2024-32487 is a command injection vulnerability that allows OS command execution through specially crafted file names.
What is the primary cause of CVE-2024-32487?
The primary cause of CVE-2024-32487 is improper handling of quoting in the filename.c file, which allows newline characters to be used maliciously.