Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3210-1
HistoryFeb 23, 2017 - 12:00 a.m.

LibreOffice vulnerability

2017-02-2300:00:00
ubuntu.com
66

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

29.5%

JSON

Releases

  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • libreoffice - Office productivity suite

Details

Ben Hayak discovered that it was possible to make LibreOffice Calc and Writer
disclose arbitrary files to an attacker if a user opened a specially crafted
file with embedded links.

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchlibreoffice< 1:5.1.6~rc2-0ubuntu1~xenial1UNKNOWN
Ubuntu16.04noarchfonts-opensymbol< 2:102.7+LibO5.1.6~rc2-0ubuntu1~xenial1UNKNOWN
Ubuntu16.04noarchgir1.2-lokdocview-0.1< 1:5.1.6~rc2-0ubuntu1~xenial1UNKNOWN
Ubuntu16.04noarchgir1.2-lokdocview-0.1-dbgsym< 1:5.1.6~rc2-0ubuntu1~xenial1UNKNOWN
Ubuntu16.04noarchlibreoffice-avmedia-backend-gstreamer< 1:5.1.6~rc2-0ubuntu1~xenial1UNKNOWN
Ubuntu16.04noarchlibreoffice-avmedia-backend-gstreamer-dbgsym< 1:5.1.6~rc2-0ubuntu1~xenial1UNKNOWN
Ubuntu16.04noarchlibreoffice-base< 1:5.1.6~rc2-0ubuntu1~xenial1UNKNOWN
Ubuntu16.04noarchlibreoffice-base-core< 1:5.1.6~rc2-0ubuntu1~xenial1UNKNOWN
Ubuntu16.04noarchlibreoffice-base-core-dbgsym< 1:5.1.6~rc2-0ubuntu1~xenial1UNKNOWN
Ubuntu16.04noarchlibreoffice-base-dbgsym< 1:5.1.6~rc2-0ubuntu1~xenial1UNKNOWN
Rows per page:
1-10 of 1971

Related

openvas 11
centos 2
redhat 2
nessus 17
cve 1
oraclelinux 4
debiancve 1
ubuntucve 1
redhatcve 1
osv 2
cvelist 1
nvd 1
veracode 1
prion 1
debian 2
kaspersky 1
threatpost 1
freebsd 1
openvas
openvas
RedHat Update for libreoffice RHSA-2017:0979-01
2017-04-19 00:00:00
CentOS Update for autocorr-af CESA-2017:0914 centos7
2017-04-14 00:00:00
Debian: Security Advisory (DSA-3792-1)
2017-02-22 00:00:00
centos
centos
autocorr, libreoffice security update
2017-04-19 12:13:32
autocorr, libreoffice security update
2017-04-13 10:58:20
redhat
redhat
(RHSA-2017:0979) Moderate: libreoffice security update
2017-04-18 02:49:39
(RHSA-2017:0914) Moderate: libreoffice security and bug fix update
2017-04-12 10:03:18
nessus
nessus
Debian DSA-3792-1 : libreoffice - security update
2017-02-24 00:00:00
Oracle Linux 7 : libreoffice (ELSA-2017-0914)
2017-04-13 00:00:00
RHEL 7 : libreoffice (RHSA-2017:0914)
2017-04-13 00:00:00
cve
cve
CVE-2017-3157
2017-11-20 20:29:00
oraclelinux
oraclelinux
libreoffice security update
2017-04-18 00:00:00
libreoffice security and bug fix update
2017-08-07 00:00:00
libreoffice security and bug fix update
2017-04-12 00:00:00
debiancve
debiancve
CVE-2017-3157
2017-11-20 20:29:00
ubuntucve
ubuntucve
CVE-2017-3157
2017-02-22 00:00:00
redhatcve
redhatcve
CVE-2017-3157
2017-02-22 15:19:06
osv
osv
libreoffice - security update
2017-02-23 00:00:00
libreoffice - security update
2017-04-23 00:00:00
cvelist
cvelist
CVE-2017-3157
2017-11-19 00:00:00
nvd
nvd
CVE-2017-3157
2017-11-20 20:29:00
veracode
veracode
Information Disclosure
2019-01-15 09:17:02
prion
prion
Design/Logic Flaw
2017-11-20 20:29:00
debian
debian
[SECURITY] [DSA 3792-1] libreoffice security update
2017-02-23 22:13:34
[SECURITY] [DLA 910-1] libreoffice security update
2017-04-23 21:49:14
kaspersky
kaspersky
KLA11148 Multiple vulnerabilities in Apache OpenOffice
2017-11-20 00:00:00
threatpost
threatpost
Apache OpenOffice Update Patches Four Vulnerabilities
2017-10-28 07:00:08
freebsd
freebsd
Apache OpenOffice -- multiple vulnerabilities
2016-09-11 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

29.5%

JSON
Related for USN-3210-1
openvas11centos2redhat2nessus17cve1oraclelinux4debiancve1ubuntucve1redhatcve1osv2cvelist1nvd1veracode1prion1debian2kaspersky1threatpost1freebsd1