Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-4063-1
HistoryJul 17, 2019 - 12:00 a.m.

LibreOffice vulnerabilities

2019-07-1700:00:00
ubuntu.com
245

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

Low

0.217 Low

EPSS

Percentile

96.5%

JSON

Releases

  • Ubuntu 19.04
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • libreoffice - Office productivity suite

Details

Nils Emmerich discovered that LibreOffice incorrectly handled LibreLogo
scripts. If a user were tricked into opening a specially crafted document,
a remote attacker could cause LibreOffice to execute arbitrary code.
(CVE-2019-9848)

Matei “Mal” Badanoiu discovered that LibreOffice incorrectly handled
stealth mode. Contrary to expectations, bullet graphics could be retrieved
from remote locations when running in stealth mode. (CVE-2019-9849)

OSVersionArchitecturePackageVersionFilename
Ubuntu19.04noarchlibreoffice-core< 1:6.2.5-0ubuntu0.19.04.1UNKNOWN
Ubuntu19.04noarchfonts-opensymbol< 2:102.10+LibO6.2.5-0ubuntu0.19.04.1UNKNOWN
Ubuntu19.04noarchgir1.2-lokdocview-0.1< 1:6.2.5-0ubuntu0.19.04.1UNKNOWN
Ubuntu19.04noarchliblibreofficekitgtk< 1:6.2.5-0ubuntu0.19.04.1UNKNOWN
Ubuntu19.04noarchliblibreofficekitgtk-dbgsym< 1:6.2.5-0ubuntu0.19.04.1UNKNOWN
Ubuntu19.04noarchlibreoffice< 1:6.2.5-0ubuntu0.19.04.1UNKNOWN
Ubuntu19.04noarchlibreoffice-avmedia-backend-gstreamer< 1:6.2.5-0ubuntu0.19.04.1UNKNOWN
Ubuntu19.04noarchlibreoffice-avmedia-backend-gstreamer-dbgsym< 1:6.2.5-0ubuntu0.19.04.1UNKNOWN
Ubuntu19.04noarchlibreoffice-base< 1:6.2.5-0ubuntu0.19.04.1UNKNOWN
Ubuntu19.04noarchlibreoffice-base-core< 1:6.2.5-0ubuntu0.19.04.1UNKNOWN
Rows per page:
1-10 of 2561

Related

openvas 16
gentoo 1
archlinux 1
nessus 26
debian 3
thn 2
kaspersky 1
osv 6
fedora 4
redhatcve 4
debiancve 4
attackerkb 1
checkpoint_advisories 1
alpinelinux 4
ubuntucve 4
veracode 2
cve 4
suse 2
prion 4
nvd 4
cvelist 4
redhat 2
centos 1
oraclelinux 2
mageia 1
packetstorm 1
zdt 1
metasploit 1
exploitpack 1
exploitdb 1
openvas
openvas
LibreOffice Multiple Vulnerabilities (Jul 2019) - Windows
2019-07-19 00:00:00
Debian: Security Advisory (DSA-4483-1)
2019-07-18 00:00:00
Fedora Update for libreoffice FEDORA-2019-5561d20558
2019-07-20 00:00:00
gentoo
gentoo
LibreOffice: Multiple vulnerabilities
2019-08-15 00:00:00
archlinux
archlinux
[ASA-201908-9] libreoffice-still: multiple issues
2019-08-16 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : LibreOffice vulnerabilities (USN-4063-1)
2019-07-19 00:00:00
Debian DSA-4483-1 : libreoffice - security update
2019-07-17 00:00:00
Fedora 30 : 1:libreoffice (2019-5561d20558)
2019-07-19 00:00:00
debian
debian
[SECURITY] [DSA 4483-1] libreoffice security update
2019-07-16 21:14:39
[SECURITY] [DLA 1947-1] libreoffice security update
2019-10-06 11:31:38
[SECURITY] [DSA 4501-1] libreoffice security update
2019-08-15 20:05:33
thn
thn
Just Opening A Document in LibreOffice Can Hack Your Computer (Unpatched)
2019-07-26 14:22:00
Patches for 2 Severe LibreOffice Flaws Bypassed — Update to Patch Again
2019-08-16 09:19:00
kaspersky
kaspersky
KLA11519 Multiple vulnerabilities in LibreOffice
2019-07-16 00:00:00
osv
osv
libreoffice - security update
2019-07-16 00:00:00
CVE-2019-9849
2019-07-17 12:15:10
CVE-2019-9848
2019-07-17 12:15:10
fedora
fedora
[SECURITY] Fedora 30 Update: libreoffice-6.2.5.2-1.fc30
2019-07-19 01:11:31
[SECURITY] Fedora 29 Update: libreoffice-6.1.6.3-3.fc29
2019-08-25 03:03:59
[SECURITY] Fedora 29 Update: libreoffice-6.1.6.3-4.fc29
2019-09-16 02:21:27
redhatcve
redhatcve
CVE-2019-9848
2019-08-05 11:21:42
CVE-2019-9849
2019-08-05 11:22:22
CVE-2019-9850
2019-08-23 04:21:45
debiancve
debiancve
CVE-2019-9849
2019-07-17 12:15:10
CVE-2019-9848
2019-07-17 12:15:10
CVE-2019-9850
2019-08-15 22:15:22
attackerkb
attackerkb
CVE-2019-9848
2019-07-17 00:00:00
checkpoint_advisories
checkpoint_advisories
LibreOffice Remote Code Execution (CVE-2019-9848)
2020-02-26 00:00:00
alpinelinux
alpinelinux
CVE-2019-9848
2019-07-17 12:15:10
CVE-2019-9849
2019-07-17 12:15:10
CVE-2019-9851
2019-08-15 22:15:22
ubuntucve
ubuntucve
CVE-2019-9848
2019-07-16 00:00:00
CVE-2019-9849
2019-07-16 00:00:00
CVE-2019-9850
2019-08-15 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-01 00:38:30
Unauthorized Access
2020-04-01 00:38:31
cve
cve
CVE-2019-9848
2019-07-17 12:15:10
CVE-2019-9849
2019-07-17 12:15:10
CVE-2019-9851
2019-08-15 22:15:22
suse
suse
Security update for libreoffice (important)
2019-09-03 00:00:00
Security update for libreoffice (moderate)
2019-09-25 00:00:00
prion
prion
Design/Logic Flaw
2019-07-17 12:15:00
Design/Logic Flaw
2019-07-17 12:15:00
Input validation
2019-08-15 22:15:00
nvd
nvd
CVE-2019-9849
2019-07-17 12:15:10
CVE-2019-9848
2019-07-17 12:15:10
CVE-2019-9850
2019-08-15 22:15:22
cvelist
cvelist
CVE-2019-9848
2019-07-16 00:00:00
CVE-2019-9849
2019-07-16 00:00:00
CVE-2019-9850 Insufficient url validation allowing LibreLogo script execution
2019-08-15 00:00:00
redhat
redhat
(RHSA-2020:1151) Moderate: libreoffice security and bug fix update
2020-03-31 09:25:19
(RHSA-2020:1598) Moderate: libreoffice security and bug fix update
2020-04-28 08:55:11
centos
centos
autocorr, libreoffice, libreofficekit security update
2020-04-08 18:36:06
oraclelinux
oraclelinux
libreoffice security and bug fix update
2020-04-06 00:00:00
libreoffice security and bug fix update
2020-05-05 00:00:00
mageia
mageia
Updated libreoffice packages fix security vulnerabilities
2019-11-30 16:06:06
packetstorm
packetstorm
LibreOffice Macro Python Code Execution
2019-08-20 00:00:00
zdt
zdt
LibreOffice < 6.2.6 Macro - Python Code Execution Exploit
2019-08-21 00:00:00
metasploit
metasploit
LibreOffice Macro Python Code Execution
2019-07-30 21:07:20
exploitpack
exploitpack
LibreOffice 6.2.6 Macro - Python Code Execution (Metasploit)
2019-08-21 00:00:00
exploitdb
exploitdb
LibreOffice &lt; 6.2.6 Macro - Python Code Execution (Metasploit)
2019-08-21 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

Low

0.217 Low

EPSS

Percentile

96.5%

JSON
Related for USN-4063-1
openvas16gentoo1archlinux1nessus26debian3thn2kaspersky1osv6fedora4redhatcve4debiancve4attackerkb1checkpoint_advisories1alpinelinux4ubuntucve4veracode2cve4suse2prion4nvd4cvelist4redhat2centos1oraclelinux2mageia1packetstorm1zdt1metasploit1exploitpack1exploitdb1