Rapid7 Vulnerability & Exploit Database

Alma Linux: CVE-2022-26307: Moderate: libreoffice security update (ALSA-2023-0304)

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Alma Linux: CVE-2022-26307: Moderate: libreoffice security update (ALSA-2023-0304)

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
07/25/2022
Created
01/17/2023
Added
01/16/2023
Modified
06/11/2024

Description

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where master key was poorly encoded resulting in weakening its entropy from 128 to 43 bits making the stored passwords vulerable to a brute force attack if an attacker has access to the users stored config. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions prior to 7.3.3.

Solution(s)

  • alma-upgrade-autocorr-af
  • alma-upgrade-autocorr-bg
  • alma-upgrade-autocorr-ca
  • alma-upgrade-autocorr-cs
  • alma-upgrade-autocorr-da
  • alma-upgrade-autocorr-de
  • alma-upgrade-autocorr-dsb
  • alma-upgrade-autocorr-el
  • alma-upgrade-autocorr-en
  • alma-upgrade-autocorr-es
  • alma-upgrade-autocorr-fa
  • alma-upgrade-autocorr-fi
  • alma-upgrade-autocorr-fr
  • alma-upgrade-autocorr-ga
  • alma-upgrade-autocorr-hr
  • alma-upgrade-autocorr-hsb
  • alma-upgrade-autocorr-hu
  • alma-upgrade-autocorr-is
  • alma-upgrade-autocorr-it
  • alma-upgrade-autocorr-ja
  • alma-upgrade-autocorr-ko
  • alma-upgrade-autocorr-lb
  • alma-upgrade-autocorr-lt
  • alma-upgrade-autocorr-mn
  • alma-upgrade-autocorr-nl
  • alma-upgrade-autocorr-pl
  • alma-upgrade-autocorr-pt
  • alma-upgrade-autocorr-ro
  • alma-upgrade-autocorr-ru
  • alma-upgrade-autocorr-sk
  • alma-upgrade-autocorr-sl
  • alma-upgrade-autocorr-sr
  • alma-upgrade-autocorr-sv
  • alma-upgrade-autocorr-tr
  • alma-upgrade-autocorr-vi
  • alma-upgrade-autocorr-vro
  • alma-upgrade-autocorr-zh
  • alma-upgrade-libreoffice-base
  • alma-upgrade-libreoffice-calc
  • alma-upgrade-libreoffice-core
  • alma-upgrade-libreoffice-data
  • alma-upgrade-libreoffice-draw
  • alma-upgrade-libreoffice-emailmerge
  • alma-upgrade-libreoffice-filters
  • alma-upgrade-libreoffice-gdb-debug-support
  • alma-upgrade-libreoffice-graphicfilter
  • alma-upgrade-libreoffice-gtk3
  • alma-upgrade-libreoffice-help-ar
  • alma-upgrade-libreoffice-help-bg
  • alma-upgrade-libreoffice-help-bn
  • alma-upgrade-libreoffice-help-ca
  • alma-upgrade-libreoffice-help-cs
  • alma-upgrade-libreoffice-help-da
  • alma-upgrade-libreoffice-help-de
  • alma-upgrade-libreoffice-help-dz
  • alma-upgrade-libreoffice-help-el
  • alma-upgrade-libreoffice-help-en
  • alma-upgrade-libreoffice-help-eo
  • alma-upgrade-libreoffice-help-es
  • alma-upgrade-libreoffice-help-et
  • alma-upgrade-libreoffice-help-eu
  • alma-upgrade-libreoffice-help-fi
  • alma-upgrade-libreoffice-help-fr
  • alma-upgrade-libreoffice-help-gl
  • alma-upgrade-libreoffice-help-gu
  • alma-upgrade-libreoffice-help-he
  • alma-upgrade-libreoffice-help-hi
  • alma-upgrade-libreoffice-help-hr
  • alma-upgrade-libreoffice-help-hu
  • alma-upgrade-libreoffice-help-id
  • alma-upgrade-libreoffice-help-it
  • alma-upgrade-libreoffice-help-ja
  • alma-upgrade-libreoffice-help-ko
  • alma-upgrade-libreoffice-help-lt
  • alma-upgrade-libreoffice-help-lv
  • alma-upgrade-libreoffice-help-nb
  • alma-upgrade-libreoffice-help-nl
  • alma-upgrade-libreoffice-help-nn
  • alma-upgrade-libreoffice-help-pl
  • alma-upgrade-libreoffice-help-pt-BR
  • alma-upgrade-libreoffice-help-pt-PT
  • alma-upgrade-libreoffice-help-ro
  • alma-upgrade-libreoffice-help-ru
  • alma-upgrade-libreoffice-help-si
  • alma-upgrade-libreoffice-help-sk
  • alma-upgrade-libreoffice-help-sl
  • alma-upgrade-libreoffice-help-sv
  • alma-upgrade-libreoffice-help-ta
  • alma-upgrade-libreoffice-help-tr
  • alma-upgrade-libreoffice-help-uk
  • alma-upgrade-libreoffice-help-zh-Hans
  • alma-upgrade-libreoffice-help-zh-Hant
  • alma-upgrade-libreoffice-impress
  • alma-upgrade-libreoffice-langpack-af
  • alma-upgrade-libreoffice-langpack-ar
  • alma-upgrade-libreoffice-langpack-as
  • alma-upgrade-libreoffice-langpack-bg
  • alma-upgrade-libreoffice-langpack-bn
  • alma-upgrade-libreoffice-langpack-br
  • alma-upgrade-libreoffice-langpack-ca
  • alma-upgrade-libreoffice-langpack-cs
  • alma-upgrade-libreoffice-langpack-cy
  • alma-upgrade-libreoffice-langpack-da
  • alma-upgrade-libreoffice-langpack-de
  • alma-upgrade-libreoffice-langpack-dz
  • alma-upgrade-libreoffice-langpack-el
  • alma-upgrade-libreoffice-langpack-en
  • alma-upgrade-libreoffice-langpack-eo
  • alma-upgrade-libreoffice-langpack-es
  • alma-upgrade-libreoffice-langpack-et
  • alma-upgrade-libreoffice-langpack-eu
  • alma-upgrade-libreoffice-langpack-fa
  • alma-upgrade-libreoffice-langpack-fi
  • alma-upgrade-libreoffice-langpack-fr
  • alma-upgrade-libreoffice-langpack-fy
  • alma-upgrade-libreoffice-langpack-ga
  • alma-upgrade-libreoffice-langpack-gl
  • alma-upgrade-libreoffice-langpack-gu
  • alma-upgrade-libreoffice-langpack-he
  • alma-upgrade-libreoffice-langpack-hi
  • alma-upgrade-libreoffice-langpack-hr
  • alma-upgrade-libreoffice-langpack-hu
  • alma-upgrade-libreoffice-langpack-id
  • alma-upgrade-libreoffice-langpack-it
  • alma-upgrade-libreoffice-langpack-ja
  • alma-upgrade-libreoffice-langpack-kk
  • alma-upgrade-libreoffice-langpack-kn
  • alma-upgrade-libreoffice-langpack-ko
  • alma-upgrade-libreoffice-langpack-lt
  • alma-upgrade-libreoffice-langpack-lv
  • alma-upgrade-libreoffice-langpack-mai
  • alma-upgrade-libreoffice-langpack-ml
  • alma-upgrade-libreoffice-langpack-mr
  • alma-upgrade-libreoffice-langpack-nb
  • alma-upgrade-libreoffice-langpack-nl
  • alma-upgrade-libreoffice-langpack-nn
  • alma-upgrade-libreoffice-langpack-nr
  • alma-upgrade-libreoffice-langpack-nso
  • alma-upgrade-libreoffice-langpack-or
  • alma-upgrade-libreoffice-langpack-pa
  • alma-upgrade-libreoffice-langpack-pl
  • alma-upgrade-libreoffice-langpack-pt-BR
  • alma-upgrade-libreoffice-langpack-pt-PT
  • alma-upgrade-libreoffice-langpack-ro
  • alma-upgrade-libreoffice-langpack-ru
  • alma-upgrade-libreoffice-langpack-si
  • alma-upgrade-libreoffice-langpack-sk
  • alma-upgrade-libreoffice-langpack-sl
  • alma-upgrade-libreoffice-langpack-sr
  • alma-upgrade-libreoffice-langpack-ss
  • alma-upgrade-libreoffice-langpack-st
  • alma-upgrade-libreoffice-langpack-sv
  • alma-upgrade-libreoffice-langpack-ta
  • alma-upgrade-libreoffice-langpack-te
  • alma-upgrade-libreoffice-langpack-th
  • alma-upgrade-libreoffice-langpack-tn
  • alma-upgrade-libreoffice-langpack-tr
  • alma-upgrade-libreoffice-langpack-ts
  • alma-upgrade-libreoffice-langpack-uk
  • alma-upgrade-libreoffice-langpack-ve
  • alma-upgrade-libreoffice-langpack-xh
  • alma-upgrade-libreoffice-langpack-zh-Hans
  • alma-upgrade-libreoffice-langpack-zh-Hant
  • alma-upgrade-libreoffice-langpack-zu
  • alma-upgrade-libreoffice-math
  • alma-upgrade-libreoffice-ogltrans
  • alma-upgrade-libreoffice-opensymbol-fonts
  • alma-upgrade-libreoffice-pdfimport
  • alma-upgrade-libreoffice-pyuno
  • alma-upgrade-libreoffice-sdk
  • alma-upgrade-libreoffice-sdk-doc
  • alma-upgrade-libreoffice-ure
  • alma-upgrade-libreoffice-ure-common
  • alma-upgrade-libreoffice-wiki-publisher
  • alma-upgrade-libreoffice-writer
  • alma-upgrade-libreoffice-x11
  • alma-upgrade-libreoffice-xsltfilter
  • alma-upgrade-libreofficekit

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;