close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE
24994
13 February 2025
12 November 2024
CLOSED
HIGH
7.0 - CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVE-2022-48624
|
Brocade Security Advisory ID |
BSA-2024-2600 |
|
Component |
less |
|
|
|
Summary
GNU is vulnerable to command injection due to missing sanitization of filenames when the LESSCLOSE environment variable is set and invoked. This could allow an attacker to execute malicious commands within the privileges of the utility.
Products Affected
- Brocade Fabric OS versions 9.0.0 through 9.2.0b1, and 9.2.1 through 9.2.1a
- Brocade ASCG versions before 3.1.0
Products Confirmed Not Affected
- Brocade Fabric OS versions before 9.0.0 [VEX Justification: Inline_mitigations_already_exist]
- Brocade SANnav is not exploitable. [VEX Justification: Vulnerable_code_cannot_be_contolled_by_adversary]
Solution
- Security update provided in Brocade Fabric OS versions 9.2.0c, 9.2.1a1 and 9.2.2
- Security update provided in Brocade ASCG version 3.1.0
- Although Brocade SANnav is Not Affected, Brocade has released a Security update for Brocade SANnav 2.4.0 and 2.3.1b OVA releases.
- A solution is also provided in the Brocade SANnav OVA sannav_ova_8x_os_12_2024 OVA patch. The OVA patch can be applied to Brocade SANnav 2.3.0, 2.3.0a, 2.3.1, 2.3.1a
Revision History
|
Version |
Change |
Date |
|
1.0 |
Initial Publication |
November 12, 2024 |
|
1.1 |
Added security updates for SANnav in solution |
February 13, 2025 |
Disclaimer
THIS DOCUMENT IS PROVIDED ON AN AS-IS BASIS SOLELY FOR INFORMATIONAL PURPOSES AND DOES NOT IMPLY ANY KIND OF GUARANTY OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. YOUR USE OF THE INFORMATION CONTAINED HEREIN IS AT YOUR OWN RISK. ALL INFORMATION PROVIDED HEREIN IS BASED ON BROCADE'S CURRENT KNOWLEDGE AND UNDERSTANDING OF THE VULNERABILITY AND IMPACT TO BROCADE HARDWARE AND SOFTWARE PRODUCTS. BROCADE RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.