CVE-2024-32487: Greenwoodsoftware Less vulnerability (CVSS 8.6)

Description

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.

CVSS 3.1 breakdown

Attack vectorLocal

Attack complexityLow

Privileges requiredNone

User interactionRequired

ScopeChanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected products

Greenwoodsoftware Less≤ 653

Netapp Hci Storage Nodesall versions

Netapp Solidfireall versions

Debian Linux10.0

Netapp Bootstrap OSall versions

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

Patch & vendor advisories

References

https://github.com/gwsw/less/commit/007521ac3c95bc76e3d59c6dbfe75d06c8075c33Patch
https://lists.debian.org/debian-lts-announce/2024/05/msg00018.htmlMailing List
https://security.netapp.com/advisory/ntap-20240605-0009/Vendor Advisory
https://www.openwall.com/lists/oss-security/2024/04/12/5Mailing List
https://www.openwall.com/lists/oss-security/2024/04/13/2Mailing ListPatch
http://www.openwall.com/lists/oss-security/2024/04/15/1Mailing List

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2024-32487 being actively exploited?

CVE-2024-32487 is not in the CISA KEV catalog. Its EPSS exploit probability is 0.63%.

How severe is CVE-2024-32487?

CVE-2024-32487 has a CVSS 3.1 base score of 8.6, rated high. EPSS estimates a 0.63% probability of exploitation.

Which products are affected by CVE-2024-32487?

Affected products include Greenwoodsoftware Less, Netapp Hci Storage Nodes, Netapp Solidfire, Debian Linux, Netapp Bootstrap OS.

How do I fix CVE-2024-32487?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2024-32487 against the real software inventory on every managed device, as each hourly inventory arrives. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo