Skip to content
Fencer Vulns
high 8.6

CVE-2024-32487 json

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c.

published 2024-04-13 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-30291

cvss
8.6
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 50%
public exploits
0
none known

Summary

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.

Patch / fix

  • gnu less 654
  • greenwoodsoftware less 654
  • less Debian 12 590-2.1~deb12u2
  • less Debian 14, Debian 13 590-2.1

debian advisories DEBIAN-CVE-2024-32487

  • less Ubuntu 20.04 LTS 551-1ubuntu0.3
  • less Ubuntu 22.04 LTS 590-1ubuntu0.22.04.3
  • less Ubuntu 24.04 LTS 590-2ubuntu2.1
  • less Ubuntu Pro 14.04 LTS 458-2ubuntu0.1~esm1
  • less Ubuntu Pro 16.04 LTS 481-2.1ubuntu0.2+esm2
  • less Ubuntu Pro 18.04 LTS 487-0.1ubuntu0.1~esm2

ubuntu advisories UBUNTU-CVE-2024-32487

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • less RHEL 8 530-3.el8_10
  • less RHEL 7 458-10.el7_9
  • less RHEL 9 590-4.el9_4
  • less RHEL 9.0 E4S 590-2.el9_0
  • less RHEL 9.2 EUS 590-3.el9_2
  • less RHEL 8.6 TUS, RHEL 8.6 E4S, RHEL 8.6 AUS 530-3.el8_6
  • less RHEL 8.4 TUS, RHEL 8.4 E4S, RHEL 8.4 AUS 530-2.el8_4
  • less RHEL 8.8 EUS 530-3.el8_8

red hat advisories RHSA-2024:4528RHSA-2024:4529RHSA-2024:4418RHSA-2024:4416RHSA-2024:4369RHSA-2024:4366

  • less Linux Micro 6.1 668-slfo.1.1_1.1
  • less Linux Micro 6.0 633-3.1
  • less SLE Module for Basesystem 15 SP6, openSUSE Leap 15.6 643-150600.3.3.1
  • less SLE Module for Basesystem 15 SP5, SLE Micro 5.5, SLE Micro 5.4 +10 more 590-150400.3.9.1
  • less SLES for SAP 12 SP5, SLES 12 SP5 458-7.15.1
  • less SLES for SAP 15 SP3, SLES for SAP 15 SP2, SLES 15 SP3-LTSS +6 more 530-150000.3.9.1

suse advisories SUSE-SU-2025:20394-1SUSE-SU-2025:20007-1SUSE-SU-2024:2060-1SUSE-SU-2024:1598-2SUSE-SU-2024:1598-1SUSE-SU-2024:1550-1

  • less openSUSE Tumbleweed 668-2.1

opensuse advisories openSUSE-SU-2025:14862-1

  • less AlmaLinux 8 530-3.el8_10
  • less AlmaLinux 9 590-4.el9_4

almalinux advisories ALSA-2024:4256ALSA-2024:3513

  • less Rocky Linux 8 530-3.el8_10
  • less Rocky Linux 9 590-4.el9_4

rocky linux advisories RLSA-2024:4256RLSA-2024:3513

  • less Azure Linux 3.0 643-2
  • less CBL-Mariner 2.0 590-4

azure linux advisories AZL-39914AZL-39933

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-32487 updated cvss 8.6

less: OS command injection

  • Red Hat Enterprise Linux 6 less
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat Enterprise Linux BaseOS (v. 8) less 530-3.el8_10
    fixed: vendor fix RHSA-2024:4256
  • Red Hat Enterprise Linux BaseOS (v. 9) less 590-4.el9_4
    fixed: vendor fix RHSA-2024:3513
  • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) less 530-2.el8_2
    fixed: vendor fix RHSA-2024:4366
  • Red Hat Enterprise Linux BaseOS AUS (v.8.4) less 530-2.el8_4
    fixed: vendor fix RHSA-2024:4416
  • Red Hat Enterprise Linux BaseOS AUS (v.8.6) less 530-3.el8_6
    fixed: vendor fix RHSA-2024:4418
  • Red Hat Enterprise Linux BaseOS E4S (v.8.4) less 530-2.el8_4
    fixed: vendor fix RHSA-2024:4416
  • Red Hat Enterprise Linux BaseOS E4S (v.8.6) less 530-3.el8_6
    fixed: vendor fix RHSA-2024:4418
show 7 more
  • Red Hat Enterprise Linux BaseOS E4S (v.9.0) less 590-2.el9_0
    fixed: vendor fix RHSA-2024:4528
  • Red Hat Enterprise Linux BaseOS EUS (v.8.8) less 530-3.el8_8
    fixed: vendor fix RHSA-2024:4369
  • Red Hat Enterprise Linux BaseOS EUS (v.9.2) less 590-3.el9_2
    fixed: vendor fix RHSA-2024:4529
  • Red Hat Enterprise Linux BaseOS TUS (v.8.4) less 530-2.el8_4
    fixed: vendor fix RHSA-2024:4416
  • Red Hat Enterprise Linux BaseOS TUS (v.8.6) less 530-3.el8_6
    fixed: vendor fix RHSA-2024:4418
  • Red Hat Enterprise Linux Client (v. 7) less 458-10.el7_9 Red Hat Enterprise Linux Server (v. 7) less 458-10.el7_9 Red Hat Enterprise Linux Workstation (v. 7) less 458-10.el7_9
    fixed: vendor fix RHSA-2024:3669
  • Red Hat Enterprise Linux 10 less
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.63% chance of exploitation in the next 30 days, higher than 50% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CNA 3.1 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected products

  • netapp less

Classification

Weakness
  • CWE-96 Improper Neutralization of Directives in Statically Saved Code

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.