Lucene search
UbuntuUSN-6023-1HistoryApr 17, 2023 - 12:00 a.m.
LibreOffice vulnerability
2023-04-1700:00:00
ubuntu.com
25
libreoffice
vulnerability
ubuntu
arbitrary code execution
java
class path
linux
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
29.8%
Releases
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
Packages
- libreoffice - Office productivity suite
Details
It was discovered that LibreOffice may be configured to add an
empty entry to the Java class path. This may lead to run arbitrary
Java code from the current directory.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 20.04 | noarch | libreoffice | < 1:6.4.7-0ubuntu0.20.04.7 | UNKNOWN |
| Ubuntu | 20.04 | noarch | fonts-opensymbol | < 2:102.11+LibO6.4.7-0ubuntu0.20.04.7 | UNKNOWN |
| Ubuntu | 20.04 | noarch | gir1.2-lokdocview-0.1 | < 1:6.4.7-0ubuntu0.20.04.7 | UNKNOWN |
| Ubuntu | 20.04 | noarch | libjuh-java | < 1:6.4.7-0ubuntu0.20.04.7 | UNKNOWN |
| Ubuntu | 20.04 | noarch | libjurt-java | < 1:6.4.7-0ubuntu0.20.04.7 | UNKNOWN |
| Ubuntu | 20.04 | noarch | liblibreofficekitgtk | < 1:6.4.7-0ubuntu0.20.04.7 | UNKNOWN |
| Ubuntu | 20.04 | noarch | liblibreofficekitgtk-dbgsym | < 1:6.4.7-0ubuntu0.20.04.7 | UNKNOWN |
| Ubuntu | 20.04 | noarch | libofficebean-java | < 1:6.4.7-0ubuntu0.20.04.7 | UNKNOWN |
| Ubuntu | 20.04 | noarch | libofficebean-java-dbgsym | < 1:6.4.7-0ubuntu0.20.04.7 | UNKNOWN |
| Ubuntu | 20.04 | noarch | libreoffice-avmedia-backend-gstreamer | < 1:6.4.7-0ubuntu0.20.04.7 | UNKNOWN |
References
Related
cnvd
cnvd
Apache OpenOffice code issue vulnerability
2023-03-28 00:00:00
nvd
nvd
CVE-2022-38745
2023-03-24 16:15:08
prion
prion
Design/Logic Flaw
2023-03-24 16:15:00
osv
osv
libreoffice vulnerability
2023-04-17 10:24:05
libreoffice - security update
2023-08-13 00:00:00
Moderate: libreoffice security update
2023-11-07 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6023-1)
2023-04-18 00:00:00
Debian: Security Advisory (DLA-3526-1)
2023-08-14 00:00:00
redhatcve
redhatcve
CVE-2022-38745
2023-03-27 12:43:29
cve
cve
CVE-2022-38745
2023-03-24 16:15:08
veracode
veracode
Arbitrary Code Injection
2023-04-20 04:04:11
kaspersky
kaspersky
KLA48688 RCE vulnerability in LibreOffice
2023-03-24 00:00:00
KLA48689 Multiple vulnerabilities in OpenOffice
2023-02-27 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : LibreOffice vulnerability (USN-6023-1)
2023-04-17 00:00:00
RHEL 9 : libreoffice (Unpatched Vulnerability)
2024-06-03 00:00:00
Oracle Linux 7 : libreoffice (ELSA-2024-3304)
2024-05-24 00:00:00
debiancve
debiancve
CVE-2022-38745
2023-03-24 16:15:08
cvelist
cvelist
CVE-2022-38745 Apache OpenOffice: Empty entry in Java class path
2023-03-24 15:56:48
ubuntucve
ubuntucve
CVE-2022-38745
2023-03-24 00:00:00
redhat
redhat
(RHSA-2023:6508) Moderate: libreoffice security update
2023-11-07 06:07:28
(RHSA-2023:6933) Moderate: libreoffice security update
2023-11-14 08:40:48
almalinux
almalinux
Moderate: libreoffice security update
2023-11-07 00:00:00
Moderate: libreoffice security update
2023-11-14 00:00:00
oraclelinux
oraclelinux
libreoffice security update
2023-11-11 00:00:00
libreoffice security update
2023-11-17 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
29.8%
Related for USN-6023-1