Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.DEBIAN_DLA-3368.NASL
HistoryMar 26, 2023 - 12:00 a.m.

Debian DLA-3368-1 : libreoffice - LTS security update

2023-03-2600:00:00
This script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
11
JSON

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3368 advisory.

  • LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid.
    An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to create a digitally signed ODF document, by manipulating the documentsignatures.xml or macrosignatures.xml stream within the document to contain both X509Data and KeyValue children of the KeyInfo tag, which when opened caused LibreOffice to verify using the KeyValue but to report verification with the unrelated X509Data value.
    This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.5. (CVE-2021-25636)

  • An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only matching the serial number and issuer string of the used certificate with that of a trusted certificate. This is not sufficient to verify that the macro was actually signed with the certificate. An adversary could therefore create an arbitrary certificate with a serial number and an issuer string identical to a trusted certificate which LibreOffice would present as belonging to the trusted author, potentially leading to the user to execute arbitrary code contained in macros improperly trusted. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions prior to 7.3.1. (CVE-2022-26305)

  • LibreOffice supports the storage of passwords for web connections in the user’s configuration database.
    The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where the required initialization vector for encryption was always the same which weakens the security of the encryption making them vulnerable if an attacker has access to the user’s configuration data. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions prior to 7.3.1. (CVE-2022-26306)

  • LibreOffice supports the storage of passwords for web connections in the user’s configuration database.
    The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where master key was poorly encoded resulting in weakening its entropy from 128 to 43 bits making the stored passwords vulerable to a brute force attack if an attacker has access to the users stored config. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions prior to 7.3.3. (CVE-2022-26307)

  • LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme ‘vnd.libreoffice.command’ specific to LibreOffice was added. In the affected versions of LibreOffice links using that scheme could be constructed to call internal macros with arbitrary arguments. Which when clicked on, or activated by document events, could result in arbitrary script execution without warning. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.1; 7.3 versions prior to 7.3.6. (CVE-2022-3140)

Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.

#%NASL_MIN_LEVEL 80900
#
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Debian Security Advisory dla-3368. The text
# itself is copyright (C) Software in the Public Interest, Inc.
#

include('compat.inc');

if (description)
{
  script_id(173416);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/06/01");

  script_cve_id(
    "CVE-2021-25636",
    "CVE-2022-3140",
    "CVE-2022-26305",
    "CVE-2022-26306",
    "CVE-2022-26307"
  );
  script_xref(name:"IAVB", value:"2022-B-0024-S");
  script_xref(name:"IAVB", value:"2022-B-0040-S");

  script_name(english:"Debian DLA-3368-1 : libreoffice - LTS security update");

  script_set_attribute(attribute:"synopsis", value:
"The remote Debian host is missing one or more security-related updates.");
  script_set_attribute(attribute:"description", value:
"The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the
dla-3368 advisory.

  - LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual
    aids that no alteration of the document occurred since the last signing and that the signature is valid.
    An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to create a digitally
    signed ODF document, by manipulating the documentsignatures.xml or macrosignatures.xml stream within the
    document to contain both X509Data and KeyValue children of the KeyInfo tag, which when opened caused
    LibreOffice to verify using the KeyValue but to report verification with the unrelated X509Data value.
    This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.5. (CVE-2021-25636)

  - An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was
    signed by a trusted author was done by only matching the serial number and issuer string of the used
    certificate with that of a trusted certificate. This is not sufficient to verify that the macro was
    actually signed with the certificate. An adversary could therefore create an arbitrary certificate with a
    serial number and an issuer string identical to a trusted certificate which LibreOffice would present as
    belonging to the trusted author, potentially leading to the user to execute arbitrary code contained in
    macros improperly trusted. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to
    7.2.7; 7.3 versions prior to 7.3.1. (CVE-2022-26305)

  - LibreOffice supports the storage of passwords for web connections in the user's configuration database.
    The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice
    existed where the required initialization vector for encryption was always the same which weakens the
    security of the encryption making them vulnerable if an attacker has access to the user's configuration
    data. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions
    prior to 7.3.1. (CVE-2022-26306)

  - LibreOffice supports the storage of passwords for web connections in the user's configuration database.
    The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice
    existed where master key was poorly encoded resulting in weakening its entropy from 128 to 43 bits making
    the stored passwords vulerable to a brute force attack if an attacker has access to the users stored
    config. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions
    prior to 7.3.3. (CVE-2022-26307)

  - LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint
    server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected
    versions of LibreOffice links using that scheme could be constructed to call internal macros with
    arbitrary arguments. Which when clicked on, or activated by document events, could result in arbitrary
    script execution without warning. This issue affects: The Document Foundation LibreOffice 7.4 versions
    prior to 7.4.1; 7.3 versions prior to 7.3.6. (CVE-2022-3140)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/source-package/libreoffice");
  script_set_attribute(attribute:"see_also", value:"https://www.debian.org/lts/security/2023/dla-3368");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2021-25636");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-26305");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-26306");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-26307");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-3140");
  script_set_attribute(attribute:"see_also", value:"https://packages.debian.org/source/buster/libreoffice");
  script_set_attribute(attribute:"solution", value:
"Upgrade the libreoffice packages.

For Debian 10 buster, these problems have been fixed in version 1");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2021-25636");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2022-26307");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2022/02/24");
  script_set_attribute(attribute:"patch_publication_date", value:"2023/03/26");
  script_set_attribute(attribute:"plugin_publication_date", value:"2023/03/26");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:fonts-opensymbol");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:gir1.2-lokdocview-0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:liblibreofficekitgtk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-avmedia-backend-gstreamer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-avmedia-backend-vlc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-base");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-base-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-base-drivers");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-calc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-dev-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-dev-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-draw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-evolution");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-gnome");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-gtk2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-gtk3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-ca");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-cs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-da");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-de");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-dz");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-el");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-en-gb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-en-us");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-es");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-et");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-eu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-fi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-fr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-gl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-hi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-hu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-it");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-ja");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-km");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-ko");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-nl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-om");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-pl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-pt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-pt-br");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-ru");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-sk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-sl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-sv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-tr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-vi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-zh-cn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-zh-tw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-impress");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-java-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-kde");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-kde5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-af");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-am");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-as");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ast");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-be");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-bg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-bn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-br");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-bs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ca");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-cs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-cy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-da");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-de");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-dz");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-el");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-en-gb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-en-za");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-eo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-es");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-et");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-eu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-fa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-fi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-fr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ga");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-gd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-gl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-gu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-gug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-he");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-hi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-hr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-hu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-id");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-in");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-is");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-it");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ja");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ka");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-kk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-km");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-kmr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-kn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ko");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-lt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-lv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-mk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ml");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-mn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-mr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ne");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nso");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-oc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-om");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-or");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-pa-in");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-pl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-pt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-pt-br");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ro");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ru");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-rw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-si");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-sk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-sl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-sr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ss");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-st");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-sv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ta");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-te");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-tg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-th");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-tn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-tr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ts");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-uk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-uz");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ve");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-vi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-xh");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-za");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-zh-cn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-zh-tw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-zu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-librelogo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-math");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-mysql-connector");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-nlpsolver");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-officebean");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-ogltrans");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-pdfimport");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-report-builder");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-report-builder-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-script-provider-bsh");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-script-provider-js");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-script-provider-python");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-sdbc-firebird");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-sdbc-hsqldb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-sdbc-postgresql");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-smoketest-data");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-breeze");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-colibre");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-elementary");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-sifr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-tango");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-subsequentcheckbase");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-wiki-publisher");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-writer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreofficekit-data");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreofficekit-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:python3-uno");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:uno-libs3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:ure");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:10.0");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Debian Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);

var debian_release = get_kb_item('Host/Debian/release');
if ( isnull(debian_release) ) audit(AUDIT_OS_NOT, 'Debian');
debian_release = chomp(debian_release);
if (! preg(pattern:"^(10)\.[0-9]+", string:debian_release)) audit(AUDIT_OS_NOT, 'Debian 10.0', 'Debian ' + debian_release);
var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Debian', cpu);

var pkgs = [
    {'release': '10.0', 'prefix': 'fonts-opensymbol', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'gir1.2-lokdocview-0.1', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'liblibreofficekitgtk', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-avmedia-backend-gstreamer', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-avmedia-backend-vlc', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-base', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-base-core', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-base-drivers', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-calc', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-common', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-core', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-dev', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-dev-common', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-dev-doc', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-draw', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-evolution', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-gnome', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-gtk2', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-gtk3', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-ca', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-common', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-cs', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-da', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-de', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-dz', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-el', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-en-gb', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-en-us', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-es', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-et', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-eu', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-fi', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-fr', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-gl', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-hi', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-hu', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-it', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-ja', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-km', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-ko', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-nl', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-om', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-pl', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-pt', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-pt-br', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-ru', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-sk', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-sl', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-sv', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-tr', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-vi', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-zh-cn', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-help-zh-tw', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-impress', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-java-common', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-kde', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-kde5', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-af', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-am', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ar', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-as', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ast', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-be', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-bg', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-bn', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-br', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-bs', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ca', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-cs', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-cy', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-da', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-de', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-dz', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-el', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-en-gb', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-en-za', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-eo', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-es', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-et', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-eu', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-fa', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-fi', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-fr', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ga', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-gd', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-gl', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-gu', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-gug', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-he', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-hi', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-hr', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-hu', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-id', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-in', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-is', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-it', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ja', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ka', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-kk', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-km', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-kmr', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-kn', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ko', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-lt', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-lv', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-mk', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ml', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-mn', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-mr', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-nb', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ne', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-nl', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-nn', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-nr', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-nso', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-oc', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-om', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-or', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-pa-in', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-pl', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-pt', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-pt-br', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ro', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ru', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-rw', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-si', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-sk', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-sl', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-sr', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ss', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-st', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-sv', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ta', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-te', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-tg', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-th', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-tn', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-tr', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ts', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ug', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-uk', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-uz', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-ve', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-vi', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-xh', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-za', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-zh-cn', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-zh-tw', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-l10n-zu', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-librelogo', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-math', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-mysql-connector', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-nlpsolver', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-officebean', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-ogltrans', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-pdfimport', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-report-builder', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-report-builder-bin', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-script-provider-bsh', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-script-provider-js', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-script-provider-python', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-sdbc-firebird', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-sdbc-hsqldb', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-sdbc-postgresql', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-smoketest-data', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-style-breeze', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-style-colibre', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-style-elementary', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-style-sifr', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-style-tango', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-subsequentcheckbase', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-wiki-publisher', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreoffice-writer', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreofficekit-data', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'libreofficekit-dev', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'python3-uno', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'uno-libs3', 'reference': '1:6.1.5-3+deb10u8'},
    {'release': '10.0', 'prefix': 'ure', 'reference': '1:6.1.5-3+deb10u8'}
];

var flag = 0;
foreach package_array ( pkgs ) {
  var _release = NULL;
  var prefix = NULL;
  var reference = NULL;
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['prefix'])) prefix = package_array['prefix'];
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (_release && prefix && reference) {
    if (deb_check(release:_release, prefix:prefix, reference:reference)) flag++;
  }
}

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_WARNING,
    extra      : deb_report_get()
  );
  exit(0);
}
else
{
  var tested = deb_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'fonts-opensymbol / gir1.2-lokdocview-0.1 / liblibreofficekitgtk / etc');
}
VendorProductVersionCPE
debiandebian_linuxfonts-opensymbolp-cpe:/a:debian:debian_linux:fonts-opensymbol
debiandebian_linuxgir1.2-lokdocview-0.1p-cpe:/a:debian:debian_linux:gir1.2-lokdocview-0.1
debiandebian_linuxliblibreofficekitgtkp-cpe:/a:debian:debian_linux:liblibreofficekitgtk
debiandebian_linuxlibreofficep-cpe:/a:debian:debian_linux:libreoffice
debiandebian_linuxlibreoffice-avmedia-backend-gstreamerp-cpe:/a:debian:debian_linux:libreoffice-avmedia-backend-gstreamer
debiandebian_linuxlibreoffice-avmedia-backend-vlcp-cpe:/a:debian:debian_linux:libreoffice-avmedia-backend-vlc
debiandebian_linuxlibreoffice-basep-cpe:/a:debian:debian_linux:libreoffice-base
debiandebian_linuxlibreoffice-base-corep-cpe:/a:debian:debian_linux:libreoffice-base-core
debiandebian_linuxlibreoffice-base-driversp-cpe:/a:debian:debian_linux:libreoffice-base-drivers
debiandebian_linuxlibreoffice-calcp-cpe:/a:debian:debian_linux:libreoffice-calc
Rows per page:
1-10 of 1801

Related

openvas 17
osv 6
rocky 3
almalinux 3
nessus 25
thn 1
oraclelinux 3
redhat 3
kaspersky 3
freebsd 1
cnvd 3
debiancve 5
ubuntucve 5
prion 7
veracode 5
cve 7
redhatcve 5
alpinelinux 5
cvelist 7
fedora 2
mageia 1
gentoo 1
zdi 1
openvas
openvas
Debian: Security Advisory (DLA-3368-1)
2023-03-27 00:00:00
Libre Office 7.2.x < 7.2.7, 7.3.x < 7.3.3 Multiple Vulnerabilities (Jul 2022) - Mac OS X
2022-07-28 00:00:00
Libre Office 7.2.x < 7.2.7, 7.3.x < 7.3.3 Multiple Vulnerabilities (Jul 2022) - Linux
2022-07-28 00:00:00
osv
osv
Moderate: libreoffice security update
2023-01-12 08:25:20
Moderate: libreoffice security update
2023-01-12 00:00:00
Moderate: libreoffice security update
2023-01-23 14:29:58
rocky
rocky
libreoffice security update
2023-01-12 08:25:20
libreoffice security update
2023-01-23 14:29:58
libreoffice security update
2022-11-08 06:20:10
almalinux
almalinux
Moderate: libreoffice security update
2023-01-12 00:00:00
Moderate: libreoffice security update
2023-01-23 00:00:00
Moderate: libreoffice security update
2022-11-08 00:00:00
nessus
nessus
AlmaLinux 8 : libreoffice (ALSA-2023:0089)
2023-01-14 00:00:00
AlmaLinux 9 : libreoffice (ALSA-2023:0304)
2023-01-25 00:00:00
Rocky Linux 9 : libreoffice (RLSA-2023:0304)
2023-11-06 00:00:00
thn
thn
LibreOffice Releases Software Update to Patch 3 New Vulnerabilities
2022-07-28 06:41:00
oraclelinux
oraclelinux
libreoffice security update
2023-01-18 00:00:00
libreoffice security update
2023-01-24 00:00:00
libreoffice security update
2022-11-15 00:00:00
redhat
redhat
(RHSA-2023:0089) Moderate: libreoffice security update
2023-01-12 08:25:20
(RHSA-2023:0304) Moderate: libreoffice security update
2023-01-23 14:29:58
(RHSA-2022:7461) Moderate: libreoffice security update
2022-11-08 06:20:10
kaspersky
kaspersky
KLA12593 Multiple vulnerabilities in LibreOffice
2022-07-25 00:00:00
KLA12465 Security vulnerability in LibreOffice
2022-02-22 00:00:00
KLA20006 RCE vulnerability in LibreOffice
2022-10-11 00:00:00
freebsd
freebsd
Apache OpenOffice -- master password vulnerabilities
2022-02-25 00:00:00
cnvd
cnvd
LibreOffice encryption problem vulnerability
2022-07-27 00:00:00
LibreOffice Trust Management Issue Vulnerability (CNVD-2022-54898)
2022-07-27 00:00:00
libreoffice trust management issue vulnerability (CNVD-2022-55626)
2022-02-24 00:00:00
debiancve
debiancve
CVE-2022-26306
2022-07-25 15:15:00
CVE-2022-26307
2022-07-25 15:15:00
CVE-2022-26305
2022-07-25 15:15:00
ubuntucve
ubuntucve
CVE-2022-26307
2022-07-25 00:00:00
CVE-2022-26305
2022-07-25 00:00:00
CVE-2021-25636
2022-02-24 00:00:00
prion
prion
Design/Logic Flaw
2022-07-25 15:15:00
Design/Logic Flaw
2022-07-25 15:15:00
Input validation
2022-07-25 15:15:00
veracode
veracode
Information Disclosure
2022-08-10 11:52:02
Improper Certificate Validation
2022-08-10 11:45:43
Insecure Cryptographic Function
2022-08-10 11:51:50
cve
cve
CVE-2022-26305
2022-07-25 15:15:00
CVE-2022-26306
2022-07-25 15:15:00
CVE-2022-26307
2022-07-25 15:15:00
redhatcve
redhatcve
CVE-2022-26307
2022-08-16 09:38:25
CVE-2022-26306
2022-08-16 09:38:21
CVE-2022-26305
2022-08-16 09:38:21
alpinelinux
alpinelinux
CVE-2022-26307
2022-07-25 15:15:00
CVE-2022-26305
2022-07-25 15:15:00
CVE-2022-26306
2022-07-25 15:15:00
cvelist
cvelist
CVE-2022-26305 Execution of Untrusted Macros Due to Improper Certificate Validation
2022-07-25 00:00:00
CVE-2022-26307 Weak Master Keys
2022-07-25 00:00:00
CVE-2022-26306 Execution of Untrusted Macros Due to Improper Certificate Validation
2022-07-25 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: libreoffice-7.1.8.1-4.fc34
2022-03-03 15:51:28
[SECURITY] Fedora 35 Update: libreoffice-7.2.7.2-2.fc35
2022-10-23 09:13:01
mageia
mageia
Updated libreoffice packages fix security vulnerability
2022-10-29 02:32:51
gentoo
gentoo
LibreOffice: Arbitrary Code Execution
2022-12-19 00:00:00
zdi
zdi
LibreOffice Exposed Dangerous Function Remote Code Execution Vulnerability
2022-10-21 00:00:00
JSON
Related for DEBIAN_DLA-3368.NASL
openvas17osv6rocky3almalinux3nessus25thn1oraclelinux3redhat3kaspersky3freebsd1cnvd3debiancve5ubuntucve5prion7veracode5cve7redhatcve5alpinelinux5cvelist7fedora2mageia1gentoo1zdi1