Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12593
HistoryJul 25, 2022 - 12:00 a.m.

KLA12593 Multiple vulnerabilities in LibreOffice

2022-07-2500:00:00
Kaspersky Lab
threats.kaspersky.com
12

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.8%

JSON

Detect date:

07/25/2022

Severity:

High

Description:

Multiple vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code.

Affected products:

LibreOffice earlier than 7.2.7
LibreOffice 7.3.x earlier than 7.3.3

Solution:

Update to the latest version
Download LibreOffice

Original advisories:

Execution of Untrusted Macros Due to Improper Certificate Validation
Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password
Weak Master Keys

Impacts:

ACE

Related products:

LibreOffice

CVE-IDS:

CVE-2022-263067.5Critical
CVE-2022-263078.8Critical
CVE-2022-263057.5Critical

Related

osv 7
openvas 10
nessus 20
ubuntu 2
rocky 2
almalinux 2
oraclelinux 2
thn 1
redhat 2
debian 1
suse 1
freebsd 1
cnvd 2
debiancve 3
cve 5
veracode 3
redhatcve 3
alpinelinux 3
prion 5
ubuntucve 3
cvelist 5
osv
osv
libreoffice vulnerabilities
2022-10-06 13:28:50
Moderate: libreoffice security update
2023-01-12 08:25:20
Moderate: libreoffice security update
2023-01-12 00:00:00
openvas
openvas
Libre Office 7.2.x < 7.2.7, 7.3.x < 7.3.3 Multiple Vulnerabilities (Jul 2022) - Mac OS X
2022-07-28 00:00:00
Libre Office 7.2.x < 7.2.7, 7.3.x < 7.3.3 Multiple Vulnerabilities (Jul 2022) - Linux
2022-07-28 00:00:00
Libre Office 7.2.x < 7.2.7, 7.3.x < 7.3.3 Multiple Vulnerabilities (Jul 2022) - Windows
2022-07-27 00:00:00
nessus
nessus
RHEL 8 : libreoffice (Unpatched Vulnerability)
2024-05-11 00:00:00
Ubuntu 20.04 LTS : LibreOffice vulnerabilities (USN-5661-1)
2022-10-06 00:00:00
Rocky Linux 9 : libreoffice (RLSA-2023:0304)
2023-11-06 00:00:00
ubuntu
ubuntu
LibreOffice vulnerabilities
2022-10-06 00:00:00
LibreOffice vulnerabilities
2022-10-20 00:00:00
rocky
rocky
libreoffice security update
2023-01-12 08:25:20
libreoffice security update
2023-01-23 14:29:58
almalinux
almalinux
Moderate: libreoffice security update
2023-01-12 00:00:00
Moderate: libreoffice security update
2023-01-23 00:00:00
oraclelinux
oraclelinux
libreoffice security update
2023-01-18 00:00:00
libreoffice security update
2023-01-24 00:00:00
thn
thn
LibreOffice Releases Software Update to Patch 3 New Vulnerabilities
2022-07-28 06:41:00
redhat
redhat
(RHSA-2023:0089) Moderate: libreoffice security update
2023-01-12 08:25:20
(RHSA-2023:0304) Moderate: libreoffice security update
2023-01-23 14:29:58
debian
debian
[SECURITY] [DLA 3368-1] libreoffice security update
2023-03-26 21:05:25
suse
suse
Security update for libreoffice (important)
2022-10-19 00:00:00
freebsd
freebsd
Apache OpenOffice -- master password vulnerabilities
2022-02-25 00:00:00
cnvd
cnvd
LibreOffice encryption problem vulnerability
2022-07-27 00:00:00
LibreOffice Trust Management Issue Vulnerability (CNVD-2022-54898)
2022-07-27 00:00:00
debiancve
debiancve
CVE-2022-26306
2022-07-25 15:15:00
CVE-2022-26307
2022-07-25 15:15:00
CVE-2022-26305
2022-07-25 15:15:00
cve
cve
CVE-2022-26305
2022-07-25 15:15:00
CVE-2022-26307
2022-07-25 15:15:00
CVE-2022-26306
2022-07-25 15:15:00
veracode
veracode
Information Disclosure
2022-08-10 11:52:02
Improper Certificate Validation
2022-08-10 11:45:43
Insecure Cryptographic Function
2022-08-10 11:51:50
redhatcve
redhatcve
CVE-2022-26307
2022-08-16 09:38:25
CVE-2022-26306
2022-08-16 09:38:21
CVE-2022-26305
2022-08-16 09:38:21
alpinelinux
alpinelinux
CVE-2022-26307
2022-07-25 15:15:00
CVE-2022-26305
2022-07-25 15:15:00
CVE-2022-26306
2022-07-25 15:15:00
prion
prion
Design/Logic Flaw
2022-07-25 15:15:00
Design/Logic Flaw
2022-07-25 15:15:00
Input validation
2022-07-25 15:15:00
ubuntucve
ubuntucve
CVE-2022-26307
2022-07-25 00:00:00
CVE-2022-26305
2022-07-25 00:00:00
CVE-2022-26306
2022-07-25 00:00:00
cvelist
cvelist
CVE-2022-26305 Execution of Untrusted Macros Due to Improper Certificate Validation
2022-07-25 00:00:00
CVE-2022-26307 Weak Master Keys
2022-07-25 00:00:00
CVE-2022-26306 Execution of Untrusted Macros Due to Improper Certificate Validation
2022-07-25 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.8%

JSON
Related for KLA12593
osv7openvas10nessus20ubuntu2rocky2almalinux2oraclelinux2thn1redhat2debian1suse1freebsd1cnvd2debiancve3cve5veracode3redhatcve3alpinelinux3prion5ubuntucve3cvelist5