Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.ORACLELINUX_ELSA-2020-4628.NASL
HistoryNov 12, 2020 - 12:00 a.m.

Oracle Linux 8 : libreoffice (ELSA-2020-4628)

2020-11-1200:00:00
This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
11
JSON

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4628 advisory.

  • LibreOffice has a ‘stealth mode’ in which only documents from locations deemed ‘trusted’ are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice’s ability to include remote resources within a document. A flaw existed where remote graphic links loaded from docx documents were omitted from this protection prior to version 6.4.4. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4. (CVE-2020-12802)

  • ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need for macros or other active scripting Prior to version 6.4.4 LibreOffice allowed forms to be submitted to any URI, including file: URIs, enabling form submissions to overwrite local files. User-interaction is required to submit the form, but to avoid the possibility of malicious documents engineered to maximize the possibility of inadvertent user submission this feature has now been limited to http[s] URIs, removing the possibility to overwrite local files. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.
    (CVE-2020-12803)

Note that Nessus has not tested for this issue but has instead relied only on the application’s self-reported version number.

##
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Oracle Linux Security Advisory ELSA-2020-4628.
##

include('compat.inc');

if (description)
{
  script_id(142813);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2020/11/13");

  script_cve_id("CVE-2020-12802", "CVE-2020-12803");

  script_name(english:"Oracle Linux 8 : libreoffice (ELSA-2020-4628)");
  script_summary(english:"Checks the rpm output for the updated packages");

  script_set_attribute(attribute:"synopsis", value:
"The remote Oracle Linux host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the
ELSA-2020-4628 advisory.

  - LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to
    retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to
    disable LibreOffice's ability to include remote resources within a document. A flaw existed where remote
    graphic links loaded from docx documents were omitted from this protection prior to version 6.4.4. This
    issue affects: The Document Foundation LibreOffice versions prior to 6.4.4. (CVE-2020-12802)

  - ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form
    data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF
    implements the XForms W3C standard, which allows data to be submitted without the need for macros or other
    active scripting Prior to version 6.4.4 LibreOffice allowed forms to be submitted to any URI, including
    file: URIs, enabling form submissions to overwrite local files. User-interaction is required to submit the
    form, but to avoid the possibility of malicious documents engineered to maximize the possibility of
    inadvertent user submission this feature has now been limited to http[s] URIs, removing the possibility to
    overwrite local files. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.
    (CVE-2020-12803)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://linux.oracle.com/errata/ELSA-2020-4628.html");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-12803");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"vuln_publication_date", value:"2020/06/08");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/11/10");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/11/12");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:8");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-af");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-bg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-ca");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-cs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-da");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-de");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-en");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-es");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-fa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-fi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-fr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-ga");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-hr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-hu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-is");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-it");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-ja");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-ko");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-lb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-lt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-mn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-nl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-pl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-pt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-ro");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-ru");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-sk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-sl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-sr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-sv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-tr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-vi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:autocorr-zh");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libcmis");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:liborcus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-base");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-calc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-data");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-draw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-emailmerge");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-filters");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-gdb-debug-support");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-graphicfilter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-gtk3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-ar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-bg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-bn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-ca");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-cs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-da");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-de");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-dz");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-el");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-en");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-es");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-et");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-eu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-fi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-fr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-gl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-gu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-he");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-hi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-hr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-hu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-id");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-it");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-ja");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-ko");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-lt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-lv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-nb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-nl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-nn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-pl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-pt-BR");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-pt-PT");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-ro");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-ru");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-si");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-sk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-sl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-sv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-ta");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-tr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-uk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-zh-Hans");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-help-zh-Hant");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-impress");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-af");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-ar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-as");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-bg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-bn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-br");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-ca");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-cs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-cy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-da");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-de");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-dz");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-el");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-en");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-es");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-et");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-eu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-fa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-fi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-fr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-ga");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-gl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-gu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-he");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-hi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-hr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-hu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-id");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-it");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-ja");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-kk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-kn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-ko");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-lt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-lv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-mai");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-ml");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-mr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-nb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-nl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-nn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-nr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-nso");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-or");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-pa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-pl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-pt-BR");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-pt-PT");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-ro");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-ru");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-si");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-sk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-sl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-sr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-ss");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-st");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-sv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-ta");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-te");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-th");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-tn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-tr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-ts");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-uk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-ve");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-xh");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-zh-Hans");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-zh-Hant");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-langpack-zu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-math");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-ogltrans");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-opensymbol-fonts");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-pdfimport");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-pyuno");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-sdk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-sdk-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-ure");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-ure-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-wiki-publisher");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-writer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-x11");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreoffice-xsltfilter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libreofficekit");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Oracle Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/OracleLinux", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/local_checks_enabled");

  exit(0);
}


include('audit.inc');
include('global_settings.inc');
include('rpm.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item('Host/OracleLinux')) audit(AUDIT_OS_NOT, 'Oracle Linux');
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || !pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux)", string:release)) audit(AUDIT_OS_NOT, 'Oracle Linux');
os_ver = pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\.[0-9]+)?)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'Oracle Linux');
os_ver = os_ver[1];
if (! preg(pattern:"^8([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, 'Oracle Linux 8', 'Oracle Linux ' + os_ver);

if (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Oracle Linux', cpu);

pkgs = [
    {'reference':'autocorr-af-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-bg-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-ca-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-cs-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-da-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-de-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-en-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-es-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-fa-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-fi-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-fr-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-ga-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-hr-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-hu-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-is-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-it-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-ja-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-ko-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-lb-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-lt-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-mn-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-nl-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-pl-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-pt-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-ro-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-ru-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-sk-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-sl-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-sr-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-sv-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-tr-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-vi-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'autocorr-zh-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'libcmis-0.5.2-1.el8', 'cpu':'i686', 'release':'8'},
    {'reference':'libcmis-0.5.2-1.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'liborcus-0.14.1-1.el8', 'cpu':'i686', 'release':'8'},
    {'reference':'liborcus-0.14.1-1.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'libreoffice-base-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-calc-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-core-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-data-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-draw-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-emailmerge-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-filters-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-gdb-debug-support-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-graphicfilter-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-gtk3-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-ar-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-bg-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-bn-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-ca-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-cs-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-da-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-de-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-dz-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-el-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-en-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-es-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-et-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-eu-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-fi-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-fr-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-gl-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-gu-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-he-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-hi-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-hr-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-hu-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-id-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-it-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-ja-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-ko-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-lt-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-lv-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-nb-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-nl-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-nn-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-pl-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-pt-BR-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-pt-PT-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-ro-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-ru-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-si-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-sk-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-sl-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-sv-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-ta-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-tr-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-uk-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-zh-Hans-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-help-zh-Hant-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-impress-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-af-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-ar-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-as-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-bg-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-bn-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-br-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-ca-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-cs-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-cy-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-da-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-de-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-dz-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-el-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-en-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-es-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-et-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-eu-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-fa-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-fi-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-fr-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-ga-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-gl-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-gu-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-he-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-hi-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-hr-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-hu-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-id-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-it-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-ja-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-kk-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-kn-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-ko-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-lt-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-lv-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-mai-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-ml-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-mr-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-nb-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-nl-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-nn-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-nr-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-nso-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-or-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-pa-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-pl-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-pt-BR-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-pt-PT-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-ro-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-ru-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-si-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-sk-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-sl-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-sr-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-ss-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-st-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-sv-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-ta-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-te-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-th-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-tn-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-tr-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-ts-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-uk-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-ve-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-xh-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-zh-Hans-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-zh-Hant-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-langpack-zu-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-math-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-ogltrans-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-opensymbol-fonts-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-pdfimport-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-pyuno-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-sdk-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-sdk-doc-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-ure-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-ure-common-6.3.6.2-3.0.1.el8', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-wiki-publisher-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-writer-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-x11-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreoffice-xsltfilter-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'},
    {'reference':'libreofficekit-6.3.6.2-3.0.1.el8', 'cpu':'x86_64', 'release':'8', 'epoch':'1'}
];

flag = 0;
foreach package_array ( pkgs ) {
  reference = NULL;
  release = NULL;
  sp = NULL;
  cpu = NULL;
  el_string = NULL;
  rpm_spec_vers_cmp = NULL;
  epoch = NULL;
  allowmaj = NULL;
  rpm_prefix = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) release = 'EL' + package_array['release'];
  if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
  if (!empty_or_null(package_array['cpu'])) cpu = package_array['cpu'];
  if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
  if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];
  if (!empty_or_null(package_array['rpm_prefix'])) rpm_prefix = package_array['rpm_prefix'];
  if (reference && release) {
    if (rpm_prefix) {
        if (rpm_exists(release:release, rpm:rpm_prefix) && rpm_check(release:release, sp:sp, cpu:cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj)) flag++;
    } else {
        if (rpm_check(release:release, sp:sp, cpu:cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj)) flag++;
    }
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'autocorr-af / autocorr-bg / autocorr-ca / etc');
}
VendorProductVersionCPE
oraclelinux8cpe:/o:oracle:linux:8
oraclelinuxautocorr-afp-cpe:/a:oracle:linux:autocorr-af
oraclelinuxautocorr-bgp-cpe:/a:oracle:linux:autocorr-bg
oraclelinuxautocorr-cap-cpe:/a:oracle:linux:autocorr-ca
oraclelinuxautocorr-csp-cpe:/a:oracle:linux:autocorr-cs
oraclelinuxautocorr-dap-cpe:/a:oracle:linux:autocorr-da
oraclelinuxautocorr-dep-cpe:/a:oracle:linux:autocorr-de
oraclelinuxautocorr-enp-cpe:/a:oracle:linux:autocorr-en
oraclelinuxautocorr-esp-cpe:/a:oracle:linux:autocorr-es
oraclelinuxautocorr-fap-cpe:/a:oracle:linux:autocorr-fa
Rows per page:
1-10 of 1741

Related

veracode 2
suse 2
nessus 10
openvas 9
osv 6
fedora 1
rocky 1
freebsd 1
redhat 1
oraclelinux 1
almalinux 1
redhatcve 2
debian 1
ubuntucve 2
kaspersky 2
cve 2
prion 2
alpinelinux 2
debiancve 2
ubuntu 1
veracode
veracode
Information Disclosure
2020-11-05 03:18:59
Arbitrary File Overwrite
2020-11-05 03:18:59
suse
suse
Security update for libreoffice (moderate)
2020-08-16 00:00:00
Security update for libreoffice (moderate)
2020-08-27 00:00:00
nessus
nessus
openSUSE Security Update : libreoffice (openSUSE-2020-1261)
2020-08-27 00:00:00
Fedora 31 : 1:libreoffice (2020-8922773bc4)
2020-06-29 00:00:00
FreeBSD : LibreOffice Security Advisory (96fb446d-ac7b-11ea-8b5e-b42e99a1b9c3)
2020-06-17 00:00:00
openvas
openvas
openSUSE: Security Advisory for libreoffice (openSUSE-SU-2020:1222-1)
2020-08-17 00:00:00
Libre Office Multiple Vulnerabilities (Jun 2020) - Linux
2020-08-03 00:00:00
Libre Office Multiple Vulnerabilities (Jun 2020) - Mac OS X
2020-08-03 00:00:00
osv
osv
Low: libreoffice security, bug fix, and enhancement update
2020-11-03 12:21:42
Low: libreoffice security, bug fix, and enhancement update
2020-11-03 12:21:42
libreoffice - security update
2023-12-31 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: libreoffice-6.3.6.2-4.fc31
2020-06-27 03:08:06
rocky
rocky
libreoffice security, bug fix, and enhancement update
2020-11-03 12:21:42
freebsd
freebsd
LibreOffice Security Advisory
2020-06-08 00:00:00
redhat
redhat
(RHSA-2020:4628) Low: libreoffice security, bug fix, and enhancement update
2020-11-03 12:21:42
oraclelinux
oraclelinux
libreoffice security, bug fix, and enhancement update
2020-11-10 00:00:00
almalinux
almalinux
Low: libreoffice security, bug fix, and enhancement update
2020-11-03 12:21:42
redhatcve
redhatcve
CVE-2020-12802
2020-06-23 19:00:14
CVE-2020-12803
2020-06-18 08:28:51
debian
debian
[SECURITY] [DLA 3703-1] libreoffice security update
2023-12-31 09:28:21
ubuntucve
ubuntucve
CVE-2020-12803
2020-06-08 00:00:00
CVE-2020-12802
2020-06-08 00:00:00
kaspersky
kaspersky
KLA11804 XForms vulnerability in LibreOffice
2020-06-09 00:00:00
KLA11805 Security vulnerability in LibreOffice
2020-06-08 00:00:00
cve
cve
CVE-2020-12802
2020-06-08 16:15:00
CVE-2020-12803
2020-06-08 16:15:00
prion
prion
Deserialization of untrusted data
2020-06-08 16:15:00
Design/Logic Flaw
2020-06-08 16:15:00
alpinelinux
alpinelinux
CVE-2020-12803
2020-06-08 16:15:00
CVE-2020-12802
2020-06-08 16:15:00
debiancve
debiancve
CVE-2020-12803
2020-06-08 16:15:00
CVE-2020-12802
2020-06-08 16:15:00
ubuntu
ubuntu
LibreOffice vulnerabilities
2022-10-20 00:00:00
JSON
Related for ORACLELINUX_ELSA-2020-4628.NASL
veracode2suse2nessus10openvas9osv6fedora1rocky1freebsd1redhat1oraclelinux1almalinux1redhatcve2debian1ubuntucve2kaspersky2cve2prion2alpinelinux2debiancve2ubuntu1