Lucene search
This script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.DEBIAN_DLA-3526.NASLHistoryAug 14, 2023 - 12:00 a.m.
Debian DLA-3526-1 : libreoffice - LTS security update
2023-08-1400:00:00
This script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
15
debian 10
libreoffice
lts
security update
multiple vulnerabilities
cve-2022-38745
cve-2023-0950
cve-2023-2255
nessus scanner
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
45.2%
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3526 advisory.
-
Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path.
This may lead to run arbitrary Java code from the current directory. (CVE-2022-38745) -
Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet formulas, such as AGGREGATE, could be created with less parameters passed to the formula interpreter than it expected, leading to an array index underflow, in which case there is a risk that arbitrary code could be executed.
This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.6; 7.5 versions prior to 7.5.1. (CVE-2023-0950) -
Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used floating frames linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.7; 7.5 versions prior to 7.5.3. (CVE-2023-2255)
Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.
#%NASL_MIN_LEVEL 80900
#
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Debian Security Advisory dla-3526. The text
# itself is copyright (C) Software in the Public Interest, Inc.
#
include('compat.inc');
if (description)
{
script_id(179739);
script_version("1.2");
script_set_attribute(attribute:"plugin_modification_date", value:"2023/12/15");
script_cve_id(
"CVE-2022-3874",
"CVE-2022-38745",
"CVE-2023-0950",
"CVE-2023-2255"
);
script_xref(name:"IAVB", value:"2023-B-0037-S");
script_name(english:"Debian DLA-3526-1 : libreoffice - LTS security update");
script_set_attribute(attribute:"synopsis", value:
"The remote Debian host is missing one or more security-related updates.");
script_set_attribute(attribute:"description", value:
"The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the
dla-3526 advisory.
- Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path.
This may lead to run arbitrary Java code from the current directory. (CVE-2022-38745)
- Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation
LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow
when loaded. In the affected versions of LibreOffice certain malformed spreadsheet formulas, such as
AGGREGATE, could be created with less parameters passed to the formula interpreter than it expected,
leading to an array index underflow, in which case there is a risk that arbitrary code could be executed.
This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.6; 7.5 versions prior to
7.5.1. (CVE-2023-0950)
- Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to
craft a document that would cause external links to be loaded without prompt. In the affected versions of
LibreOffice documents that used floating frames linked to external files, would load the contents of
those frames without prompting the user for permission to do so. This was inconsistent with the treatment
of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4
versions prior to 7.4.7; 7.5 versions prior to 7.5.3. (CVE-2023-2255)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/source-package/libreoffice");
script_set_attribute(attribute:"see_also", value:"https://www.debian.org/lts/security/2023/dla-3526");
script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-3874");
script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2022-38745");
script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-0950");
script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2023-2255");
script_set_attribute(attribute:"see_also", value:"https://packages.debian.org/source/buster/libreoffice");
script_set_attribute(attribute:"solution", value:
"Upgrade the libreoffice packages.
For Debian 10 buster, these problems have been fixed in version 1");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2022-3874");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"vuln_publication_date", value:"2023/03/24");
script_set_attribute(attribute:"patch_publication_date", value:"2023/08/13");
script_set_attribute(attribute:"plugin_publication_date", value:"2023/08/14");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:fonts-opensymbol");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:gir1.2-lokdocview-0.1");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:liblibreofficekitgtk");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-avmedia-backend-gstreamer");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-avmedia-backend-vlc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-base");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-base-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-base-drivers");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-calc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-common");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-dev");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-dev-common");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-dev-doc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-draw");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-evolution");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-gnome");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-gtk2");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-gtk3");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-ca");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-common");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-cs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-da");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-de");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-dz");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-el");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-en-gb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-en-us");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-es");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-et");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-eu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-fi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-fr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-gl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-hi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-hu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-it");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-ja");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-km");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-ko");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-nl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-om");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-pl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-pt");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-pt-br");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-ru");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-sk");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-sl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-sv");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-tr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-vi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-zh-cn");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-zh-tw");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-impress");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-java-common");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-kde");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-kde5");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-af");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-am");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ar");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-as");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ast");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-be");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-bg");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-bn");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-br");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-bs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ca");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-cs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-cy");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-da");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-de");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-dz");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-el");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-en-gb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-en-za");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-eo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-es");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-et");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-eu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-fa");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-fi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-fr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ga");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-gd");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-gl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-gu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-gug");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-he");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-hi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-hr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-hu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-id");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-in");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-is");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-it");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ja");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ka");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-kk");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-km");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-kmr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-kn");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ko");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-lt");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-lv");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-mk");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ml");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-mn");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-mr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ne");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nn");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nso");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-oc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-om");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-or");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-pa-in");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-pl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-pt");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-pt-br");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ro");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ru");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-rw");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-si");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-sk");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-sl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-sr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ss");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-st");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-sv");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ta");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-te");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-tg");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-th");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-tn");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-tr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ts");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ug");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-uk");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-uz");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ve");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-vi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-xh");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-za");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-zh-cn");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-zh-tw");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-zu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-librelogo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-math");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-mysql-connector");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-nlpsolver");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-officebean");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-ogltrans");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-pdfimport");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-report-builder");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-report-builder-bin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-script-provider-bsh");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-script-provider-js");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-script-provider-python");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-sdbc-firebird");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-sdbc-hsqldb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-sdbc-postgresql");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-smoketest-data");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-breeze");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-colibre");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-elementary");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-sifr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-tango");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-subsequentcheckbase");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-wiki-publisher");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-writer");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreofficekit-data");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreofficekit-dev");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:python3-uno");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:uno-libs3");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:ure");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:10.0");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_set_attribute(attribute:"stig_severity", value:"I");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Debian Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");
exit(0);
}
include('debian_package.inc');
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);
var debian_release = get_kb_item('Host/Debian/release');
if ( isnull(debian_release) ) audit(AUDIT_OS_NOT, 'Debian');
debian_release = chomp(debian_release);
if (! preg(pattern:"^(10)\.[0-9]+", string:debian_release)) audit(AUDIT_OS_NOT, 'Debian 10.0', 'Debian ' + debian_release);
var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Debian', cpu);
var pkgs = [
{'release': '10.0', 'prefix': 'fonts-opensymbol', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'gir1.2-lokdocview-0.1', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'liblibreofficekitgtk', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-avmedia-backend-gstreamer', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-avmedia-backend-vlc', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-base', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-base-core', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-base-drivers', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-calc', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-common', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-core', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-dev', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-dev-common', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-dev-doc', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-draw', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-evolution', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-gnome', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-gtk2', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-gtk3', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-ca', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-common', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-cs', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-da', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-de', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-dz', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-el', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-en-gb', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-en-us', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-es', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-et', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-eu', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-fi', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-fr', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-gl', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-hi', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-hu', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-it', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-ja', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-km', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-ko', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-nl', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-om', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-pl', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-pt', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-pt-br', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-ru', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-sk', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-sl', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-sv', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-tr', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-vi', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-zh-cn', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-help-zh-tw', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-impress', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-java-common', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-kde', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-kde5', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-af', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-am', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ar', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-as', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ast', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-be', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-bg', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-bn', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-br', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-bs', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ca', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-cs', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-cy', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-da', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-de', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-dz', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-el', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-en-gb', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-en-za', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-eo', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-es', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-et', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-eu', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-fa', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-fi', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-fr', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ga', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-gd', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-gl', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-gu', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-gug', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-he', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-hi', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-hr', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-hu', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-id', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-in', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-is', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-it', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ja', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ka', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-kk', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-km', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-kmr', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-kn', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ko', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-lt', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-lv', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-mk', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ml', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-mn', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-mr', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-nb', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ne', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-nl', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-nn', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-nr', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-nso', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-oc', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-om', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-or', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-pa-in', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-pl', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-pt', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-pt-br', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ro', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ru', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-rw', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-si', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-sk', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-sl', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-sr', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ss', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-st', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-sv', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ta', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-te', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-tg', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-th', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-tn', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-tr', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ts', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ug', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-uk', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-uz', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-ve', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-vi', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-xh', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-za', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-zh-cn', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-zh-tw', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-l10n-zu', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-librelogo', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-math', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-mysql-connector', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-nlpsolver', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-officebean', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-ogltrans', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-pdfimport', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-report-builder', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-report-builder-bin', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-script-provider-bsh', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-script-provider-js', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-script-provider-python', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-sdbc-firebird', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-sdbc-hsqldb', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-sdbc-postgresql', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-smoketest-data', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-style-breeze', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-style-colibre', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-style-elementary', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-style-sifr', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-style-tango', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-subsequentcheckbase', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-wiki-publisher', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreoffice-writer', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreofficekit-data', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'libreofficekit-dev', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'python3-uno', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'uno-libs3', 'reference': '1:6.1.5-3+deb10u10'},
{'release': '10.0', 'prefix': 'ure', 'reference': '1:6.1.5-3+deb10u10'}
];
var flag = 0;
foreach package_array ( pkgs ) {
var _release = NULL;
var prefix = NULL;
var reference = NULL;
if (!empty_or_null(package_array['release'])) _release = package_array['release'];
if (!empty_or_null(package_array['prefix'])) prefix = package_array['prefix'];
if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
if (_release && prefix && reference) {
if (deb_check(release:_release, prefix:prefix, reference:reference)) flag++;
}
}
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_HOLE,
extra : deb_report_get()
);
exit(0);
}
else
{
var tested = deb_pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'fonts-opensymbol / gir1.2-lokdocview-0.1 / liblibreofficekitgtk / etc');
}
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3874
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38745
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0950
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2255
packages.debian.org/source/buster/libreoffice
security-tracker.debian.org/tracker/CVE-2022-3874
security-tracker.debian.org/tracker/CVE-2022-38745
security-tracker.debian.org/tracker/CVE-2023-0950
security-tracker.debian.org/tracker/CVE-2023-2255
security-tracker.debian.org/tracker/source-package/libreoffice
www.debian.org/lts/security/2023/dla-3526
Related
openvas
openvas
Debian: Security Advisory (DLA-3526-1)
2023-08-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0075-1)
2024-01-11 00:00:00
Debian: Security Advisory (DSA-5415-1)
2023-05-29 00:00:00
nessus
nessus
RHEL 9 : libreoffice (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 9 : libreoffice (RHSA-2023:6508)
2023-11-07 00:00:00
CentOS 8 : libreoffice (CESA-2023:6933)
2023-11-14 00:00:00
osv
osv
libreoffice - security update
2023-08-13 00:00:00
Moderate: libreoffice security update
2023-11-07 00:00:00
Moderate: libreoffice security update
2023-11-14 00:00:00
debian
debian
[SECURITY] [DLA 3526-1] libreoffice security update
2023-08-13 16:32:01
[SECURITY] [DSA 5415-1] libreoffice security update
2023-05-28 15:25:12
almalinux
almalinux
Moderate: libreoffice security update
2023-11-14 00:00:00
Moderate: libreoffice security update
2023-11-07 00:00:00
redhat
redhat
(RHSA-2023:6933) Moderate: libreoffice security update
2023-11-14 08:40:48
(RHSA-2023:6508) Moderate: libreoffice security update
2023-11-07 06:07:28
(RHSA-2023:5979) Important: Satellite 6.12.5.2 Async Security Update
2023-10-20 18:38:33
oraclelinux
oraclelinux
libreoffice security update
2023-11-17 00:00:00
libreoffice security update
2023-11-11 00:00:00
kaspersky
kaspersky
KLA49330 Multiple vulnerabilities in LibreOffice
2023-05-24 00:00:00
KLA48688 RCE vulnerability in LibreOffice
2023-03-24 00:00:00
KLA48689 Multiple vulnerabilities in OpenOffice
2023-02-27 00:00:00
mageia
mageia
Updated libreoffice packages fix security vulnerability
2023-06-08 22:34:59
redos
redos
ROS-20230830-01
2023-08-30 00:00:00
gentoo
gentoo
LibreOffice: Multiple Vulnerabilities
2023-11-26 00:00:00
ubuntu
ubuntu
LibreOffice vulnerabilities
2023-06-07 00:00:00
LibreOffice vulnerability
2023-04-17 00:00:00
cnvd
cnvd
Apache OpenOffice code issue vulnerability
2023-03-28 00:00:00
prion
prion
Design/Logic Flaw
2023-03-24 16:15:00
Input validation
2023-05-25 20:15:00
Improper access control
2023-05-25 20:15:00
nvd
nvd
redhatcve
redhatcve
cve
cve
veracode
veracode
Arbitrary Code Injection
2023-04-20 04:04:11
Authorization Bypass
2023-08-07 01:27:44
Improper Validation
2023-08-06 20:17:06
ubuntucve
ubuntucve
debiancve
debiancve
cvelist
cvelist
CVE-2022-38745 Apache OpenOffice: Empty entry in Java class path
2023-03-24 15:56:48
CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
2023-05-25 00:00:00
CVE-2023-2255 Remote documents loaded without prompt via IFrame
2023-05-25 00:00:00
githubexploit
githubexploit
Exploit for CVE-2023-2255
2023-07-10 20:54:56
Exploit for CVE-2023-2255
2024-04-27 11:21:11
vulnrichment
vulnrichment
CVE-2022-3874 Os command injection via ct_command and fcct_command
2023-09-22 13:56:54
github
github
Foreman Transpilation Enables OS Command Injection
2023-09-22 15:30:15
rocky
rocky
Satellite 6.14 security and bug fix update
2023-11-11 22:58:57
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
45.2%
Related for DEBIAN_DLA-3526.NASL