Lucene search

K

[email protected]NVD:CVE-2014-3693

HistoryNov 07, 2014 - 7:55 p.m.

CVE-2014-3693

2014-11-0719:55:03

[email protected]

web.nvd.nist.gov

6

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.79

Percentile

98.3%

Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to TCP port 1599.

Affected configurations

Nvd

Node

redhatenterprise_linux_desktopMatch7.0

OR

redhatenterprise_linux_serverMatch7.0

OR

redhatenterprise_linux_workstationMatch7.0

Node

canonicalubuntu_linuxMatch14.04lts

OR

canonicalubuntu_linuxMatch14.10

Node

libreofficelibreofficeMatch4.0.0

OR

libreofficelibreofficeMatch4.0.1

OR

libreofficelibreofficeMatch4.0.2

OR

libreofficelibreofficeMatch4.0.3

OR

libreofficelibreofficeMatch4.0.3.3

OR

libreofficelibreofficeMatch4.0.4.2

OR

libreofficelibreofficeMatch4.1.0

OR

libreofficelibreofficeMatch4.1.1

OR

libreofficelibreofficeMatch4.1.2

OR

libreofficelibreofficeMatch4.1.3

OR

libreofficelibreofficeMatch4.1.4

OR

libreofficelibreofficeMatch4.2.0

OR

libreofficelibreofficeMatch4.2.1

OR

libreofficelibreofficeMatch4.2.2

OR

libreofficelibreofficeMatch4.2.3

OR

libreofficelibreofficeMatch4.2.4

OR

libreofficelibreofficeMatch4.2.5

OR

libreofficelibreofficeMatch4.2.6

OR

libreofficelibreofficeMatch4.3.0

OR

libreofficelibreofficeMatch4.3.1

OR

libreofficelibreofficeMatch4.3.2

Node

opensuseopensuseMatch13.1

References

lists.opensuse.org/opensuse-updates/2014-11/msg00049.html

rhn.redhat.com/errata/RHSA-2015-0377.html

secunia.com/advisories/62111

secunia.com/advisories/62132

secunia.com/advisories/62396

www.securityfocus.com/bid/71351

www.ubuntu.com/usn/USN-2398-1

security.gentoo.org/glsa/201603-05

www.libreoffice.org/about-us/security/advisories/CVE-2014-3693/

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.79

Percentile

98.3%

Related for NVD:CVE-2014-3693

debiancve1 ubuntu1 checkpoint_advisories1 openvas6 nessus13 mageia1 cvelist1 debian2 prion1 ubuntucve1 cve1 securityvulns1 redhat1 centos1 oraclelinux1 gentoo1