Skip to content
Fencer Vulns
high 7.8

CVE-2022-48624 json

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

published 2024-02-19 2 y ago modified 2026-06-17 4 mo ago also EUVD-2022-51319

cvss
7.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.1%
EPSS 1.1% chance of exploitation in 30 days, percentile 64%
public exploits
0
none known

Summary

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

Patch / fix

  • greenwoodsoftware less 606
  • less Debian 12 590-2.1~deb12u2
  • less Debian 14, Debian 13 590-2.1

debian advisories DEBIAN-CVE-2022-48624

  • less Ubuntu 20.04 LTS 551-1ubuntu0.2
  • less Ubuntu 22.04 LTS 590-1ubuntu0.22.04.2
  • less Ubuntu 24.04 LTS 590-2ubuntu1
  • less Ubuntu Pro 14.04 LTS 458-2ubuntu0.1~esm2
  • less Ubuntu Pro 16.04 LTS 481-2.1ubuntu0.2+esm1
  • less Ubuntu Pro 18.04 LTS 487-0.1ubuntu0.1~esm1

ubuntu advisories UBUNTU-CVE-2022-48624

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • less RHEL 8 530-3.el8_10
  • less RHEL 9 590-3.el9_3
  • less RHEL 8 530-2.el8_9
  • less RHEL 8.6 EUS 530-2.el8_6
  • less RHEL 8.8 EUS 530-2.el8_8

red hat advisories RHSA-2024:4256RHSA-2024:1989RHSA-2024:1875RHSA-2024:1692RHSA-2024:1610

  • less SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE Module for Basesystem 15 SP5 +10 more 590-150400.3.6.2
  • less SLES for SAP 15 SP3, SLES for SAP 15 SP2, SLES 15 SP3-LTSS +6 more 530-150000.3.6.2
  • less SLES for SAP 12 SP5, SLES 12 SP5 458-7.12.1

suse advisories SUSE-SU-2024:1192-1SUSE-SU-2024:1190-1SUSE-SU-2024:1189-1

  • less AlmaLinux 8 530-3.el8_10
  • less AlmaLinux 9 590-3.el9_3
  • less AlmaLinux 8 530-2.el8_9

almalinux advisories ALSA-2024:4256ALSA-2024:1692ALSA-2024:1610

  • less Rocky Linux 8 530-3.el8_10
  • less Rocky Linux 9 590-3.el9_3
  • less Rocky Linux 8 530-2.el8_9

rocky linux advisories RLSA-2024:4256RLSA-2024:1692RLSA-2024:1610

  • less CBL-Mariner 2.0 590-3

azure linux advisories AZL-34458

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2022-48624 updated cvss 7.0

less: missing quoting of shell metacharacters in LESSCLOSE handling

  • Red Hat Enterprise Linux 6 less Red Hat Enterprise Linux 7 less
    affected: no fix planned “Out of support scope”
  • Red Hat Enterprise Linux BaseOS (v. 8) less 530-2.el8_9, less 530-3.el8_10
    fixed: vendor fix RHSA-2024:4256
  • Red Hat Enterprise Linux BaseOS (v. 9) less 590-3.el9_3
    fixed: vendor fix RHSA-2024:1692
  • Red Hat Enterprise Linux BaseOS EUS (v.8.6) less 530-2.el8_6
    fixed: vendor fix RHSA-2024:1989
  • Red Hat Enterprise Linux BaseOS EUS (v.8.8) less 530-2.el8_8
    fixed: vendor fix RHSA-2024:1875
  • Red Hat RHOL 5.6 for RHEL 8 openshift-logging/kibana6-rhel8 v6.8.1-430, openshift-logging/vector-rhel8 v0.21.0-127, openshift-logging/fluentd-rhel8 v1.14.6-216, openshift-logging/eventrouter-rhel8 v0.4.0-246, openshift-logging/logging-loki-rhel8 v2.9.6-16, openshift-logging/loki-rhel8-operator v5.6.18-12, +12 more
    fixed: vendor fix RHSA-2024:2092
  • Red Hat RHOL 5.7 for RHEL 8 openshift-logging/vector-rhel8 v0.28.1-57, openshift-logging/kibana6-rhel8 v6.8.1-431, openshift-logging/fluentd-rhel8 v1.14.6-215, openshift-logging/eventrouter-rhel8 v0.4.0-248, openshift-logging/logging-loki-rhel8 v2.9.6-15, openshift-logging/loki-rhel8-operator v5.7.13-12, +12 more
    fixed: vendor fix RHSA-2024:2093

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

1.06% chance of exploitation in the next 30 days, higher than 64% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

Weakness
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.