less (SUSE:Linux Enterprise Server for SAP Applications 12 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server for SAP Applications 12 SP5 package less, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2014-9488 — CVSS 10.0 (critical): The is_utf8_well_formed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters…
• CVE-2024-32487 — CVSS 8.6 (high): less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c…
• CVE-2022-48624 — CVSS 7.8 (high): close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.