The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0610 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2022-48624:
    close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

    CVE-2022-46663:
    In GNU Less before 609, crafted data can result in less -R not filtering ANSI escape sequences sent to     the terminal.

    CVE-2024-32487:
    less through 653 allows OS command execution via a newline character in the name of a file, because     quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file     names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN     environment variable, but this is set by default in many common cases.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6105:01 advisory.

    * less: crafted data can result in less -R not filtering ANSI escape sequences sent to the terminal     (CVE-2022-46663)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the less-590-2.el9 build changelog.

  - In GNU Less before 609, crafted data can result in less -R not filtering ANSI escape sequences sent to     the terminal. (CVE-2022-46663)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the less package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In GNU Less before 609, crafted data can result in 'less -R' not filtering ANSI escape sequences sent to     the terminal. (CVE-2022-46663)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2023:3725 advisory.

  - In GNU Less before 609, crafted data can result in less -R not filtering ANSI escape sequences sent to     the terminal. (CVE-2022-46663)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-71442d7613 advisory.

    Security fix for CVE-2022-46663

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-3725 advisory.

    - Fix CVE-2022-46663

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
276270	TencentOS Server 4: less (TSSA-2024:0610)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	high
292218	MiracleLinux 9 : less-590-2.el9 (AXSA:2023-6105:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
191345	CentOS 9 : less-590-2.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	high
176790	EulerOS Virtualization 2.11.0 : less (EulerOS-SA-2023-2125)	Nessus	Huawei Local Security Checks	2023/6/7	2023/6/7	high
177629	AlmaLinux 9 : less (ALSA-2023:3725)	Nessus	Alma Linux Local Security Checks	2023/6/26	2023/6/26	high
177088	Fedora 37 : less (2023-71442d7613)	Nessus	Fedora Local Security Checks	2023/6/12	2024/11/14	high
177496	Oracle Linux 9 : less (ELSA-2023-3725)	Nessus	Oracle Linux Local Security Checks	2023/6/22	2024/10/22	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high