LibreOffice vulnerabilities

2023-12-1100:00:00

ubuntu.com

libreoffice

ubuntu

vulnerabilities

filenames

hyperlinks

gstreamer

remote attacker

arbitrary scripts

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.8%

JSON

Releases

Ubuntu 23.10
Ubuntu 23.04

Packages

libreoffice - Office productivity suite

Details

Reginaldo Silva discovered that LibreOffice incorrectly handled filenames
when passing embedded videos to GStreamer. If a user were tricked into
opening a specially crafted file, a remote attacker could possibly use this
issue to execute arbitrary GStreamer plugins. (CVE-2023-6185)

Reginaldo Silva discovered that LibreOffice incorrectly handled certain
non-typical hyperlinks. If a user were tricked into opening a specially
crafted file, a remote attacker could possibly use this issue to execute
arbitrary scripts. (CVE-2023-6186)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchlibreoffice< 4:7.6.4-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchfonts-opensymbol< 4:102.12+LibO7.6.4-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchgir1.2-lokdocview-0.1< 4:7.6.4-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchlibjuh-java< 4:7.6.4-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchlibjurt-java< 4:7.6.4-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchliblibreoffice-java< 4:7.6.4-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchliblibreofficekitgtk< 4:7.6.4-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchliblibreofficekitgtk-dbgsym< 4:7.6.4-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchlibofficebean-java< 4:7.6.4-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchlibofficebean-java-dbgsym< 4:7.6.4-0ubuntu0.23.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	23.10	noarch	libreoffice	< 4:7.6.4-0ubuntu0.23.10.1	UNKNOWN
Ubuntu	23.10	noarch	fonts-opensymbol	< 4:102.12+LibO7.6.4-0ubuntu0.23.10.1	UNKNOWN
Ubuntu	23.10	noarch	gir1.2-lokdocview-0.1	< 4:7.6.4-0ubuntu0.23.10.1	UNKNOWN
Ubuntu	23.10	noarch	libjuh-java	< 4:7.6.4-0ubuntu0.23.10.1	UNKNOWN
Ubuntu	23.10	noarch	libjurt-java	< 4:7.6.4-0ubuntu0.23.10.1	UNKNOWN
Ubuntu	23.10	noarch	liblibreoffice-java	< 4:7.6.4-0ubuntu0.23.10.1	UNKNOWN
Ubuntu	23.10	noarch	liblibreofficekitgtk	< 4:7.6.4-0ubuntu0.23.10.1	UNKNOWN
Ubuntu	23.10	noarch	liblibreofficekitgtk-dbgsym	< 4:7.6.4-0ubuntu0.23.10.1	UNKNOWN
Ubuntu	23.10	noarch	libofficebean-java	< 4:7.6.4-0ubuntu0.23.10.1	UNKNOWN
Ubuntu	23.10	noarch	libofficebean-java-dbgsym	< 4:7.6.4-0ubuntu0.23.10.1	UNKNOWN