Debian/less: high 8.6
less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled fi
Action: Upgrade less to 590-2.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 590-2.1 | - |
Fixed versions
| 590-2.1 |
Sources
- osv: DEBIAN-CVE-2024-32487#Debian:13/less
- https://security-tracker.debian.org/tracker/CVE-2024-32487
published · modified · JSON