sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade autocorr-frUpgrade libreofficekitUpgrade libreoffice-help-zh-HansUpgrade libreoffice-langpack-esUpgrade autocorr-enUpgrade libreoffice-langpack-koUpgrade libreoffice-langpack-dzUpgrade libreoffice-gtk3Upgrade libreoffice-help-ltUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-langpack-euUpgrade libreoffice-writerUpgrade libreoffice-langpack-idUpgrade libreoffice-langpack-gaUpgrade libreoffice-langpack-srUpgrade autocorr-itUpgrade libreoffice-help-nlUpgrade libreoffice-help-euUpgrade autocorr-gaUpgrade libreoffice-langpack-ruUpgrade libreoffice-help-glUpgrade libreoffice-help-etUpgrade libreoffice-help-slUpgrade libreoffice-help-siUpgrade libreoffice-langpack-zuUpgrade libreoffice-langpack-nsoUpgrade libreoffice-langpack-enUpgrade libreoffice-pyunoUpgrade libreoffice-dataUpgrade libreoffice-langpack-trUpgrade autocorr-isUpgrade autocorr-roUpgrade libreoffice-help-guUpgrade libreoffice-langpack-veUpgrade autocorr-huUpgrade libreoffice-langpack-maiUpgrade libreoffice-postgresqlUpgrade libreoffice-langpack-nlUpgrade libreofficeUpgrade libreoffice-help-bnUpgrade libreoffice-langpack-ssUpgrade libreoffice-librelogoUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-bgUpgrade autocorr-faUpgrade libreoffice-langpack-nnUpgrade libreoffice-emailmergeUpgrade libreoffice-help-hiUpgrade libreoffice-help-jaUpgrade libreoffice-opensymbol-fontsUpgrade autocorr-jaUpgrade libreoffice-drawUpgrade libreoffice-langpack-slUpgrade libreoffice-help-bgUpgrade libreoffice-help-dzUpgrade libreoffice-help-trUpgrade libreoffice-help-ukUpgrade libreoffice-langpack-ltUpgrade libreoffice-help-itUpgrade libreoffice-help-svUpgrade libreoffice-langpack-heUpgrade libreoffice-baseUpgrade libreoffice-help-elUpgrade autocorr-mnUpgrade autocorr-ruUpgrade libreoffice-xsltfilterUpgrade libreoffice-langpack-csUpgrade libreoffice-rhinoUpgrade libreoffice-ure-commonUpgrade libreoffice-langpack-taUpgrade autocorr-daUpgrade libreoffice-help-koUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-kkUpgrade libreoffice-help-nbUpgrade libreoffice-impressUpgrade libreoffice-langpack-caUpgrade autocorr-bgUpgrade autocorr-nlUpgrade libreoffice-langpack-guUpgrade libreoffice-langpack-hiUpgrade libreoffice-langpack-mrUpgrade libreoffice-help-roUpgrade libreoffice-gladeUpgrade libreoffice-sdkUpgrade libreoffice-langpack-fiUpgrade libreoffice-help-nnUpgrade libreofficekit-develUpgrade libreoffice-help-pt-PTUpgrade libreoffice-langpack-arUpgrade libreoffice-help-plUpgrade autocorr-fiUpgrade libreoffice-langpack-orUpgrade libreoffice-langpack-nrUpgrade libreoffice-langpack-itUpgrade libreoffice-langpack-cyUpgrade autocorr-trUpgrade libreoffice-langpack-plUpgrade libreoffice-langpack-afUpgrade libreoffice-langpack-jaUpgrade libreoffice-wiki-publisherUpgrade libreoffice-x11Upgrade autocorr-afUpgrade libreoffice-langpack-thUpgrade libreoffice-langpack-tsUpgrade libreoffice-help-skUpgrade libreoffice-langpack-ukUpgrade libreoffice-langpack-stUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-mlUpgrade autocorr-csUpgrade libreoffice-help-frUpgrade autocorr-ltUpgrade libreoffice-debuginfoUpgrade autocorr-slUpgrade libreoffice-langpack-xhUpgrade autocorr-skUpgrade autocorr-koUpgrade libreoffice-langpack-asUpgrade libreoffice-help-lvUpgrade libreoffice-langpack-deUpgrade libreoffice-ureUpgrade autocorr-ptUpgrade libreoffice-langpack-brUpgrade libreoffice-officebean-commonUpgrade libreoffice-help-heUpgrade libreoffice-mathUpgrade libreoffice-langpack-knUpgrade libreoffice-langpack-daUpgrade autocorr-hrUpgrade libreoffice-help-zh-HantUpgrade libreoffice-langpack-teUpgrade libreoffice-help-hrUpgrade libreoffice-calcUpgrade autocorr-srUpgrade autocorr-esUpgrade libreoffice-gdb-debug-supportUpgrade autocorr-lbUpgrade libreoffice-nlpsolverUpgrade libreoffice-langpack-bnUpgrade libreoffice-help-arUpgrade autocorr-viUpgrade libreoffice-langpack-hrUpgrade libreoffice-langpack-svUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-help-csUpgrade autocorr-caUpgrade libreoffice-langpack-siUpgrade libreoffice-langpack-skUpgrade libreoffice-help-fiUpgrade autocorr-deUpgrade libreoffice-officebeanUpgrade autocorr-plUpgrade libreoffice-langpack-elUpgrade libreoffice-langpack-faUpgrade libreoffice-help-deUpgrade libreoffice-help-taUpgrade libreoffice-ogltransUpgrade libreoffice-help-pt-BRUpgrade libreoffice-langpack-pt-PTUpgrade libreoffice-gtk2Upgrade libreoffice-langpack-lvUpgrade libreoffice-help-esUpgrade libreoffice-help-caUpgrade libreoffice-help-huUpgrade libreoffice-help-daUpgrade libreoffice-langpack-glUpgrade autocorr-svUpgrade libreoffice-pdfimportUpgrade libreoffice-langpack-huUpgrade libreoffice-help-idUpgrade autocorr-zhUpgrade libreoffice-langpack-frUpgrade libreoffice-langpack-etUpgrade libreoffice-filtersUpgrade libreoffice-help-ruUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-langpack-nbUpgrade libreoffice-coreUpgrade libreoffice-langpack-tnUpgrade libreoffice-bshUpgrade libreoffice-graphicfilter | Aug 28, 2019 | Apr 16, 2018 |
| Debian | — | Upgrade libreoffice | Apr 21, 2018 | Apr 16, 2018 |
| Redhat_linux | — | Upgrade libreoffice-langpack-tnUpgrade libreoffice-help-pt-PTUpgrade autocorr-ruUpgrade autocorr-faUpgrade libreoffice-help-csUpgrade autocorr-enUpgrade libreoffice-langpack-hrUpgrade libreoffice-pdfimportUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-langpack-etUpgrade autocorr-jaUpgrade libreoffice-langpack-frUpgrade libreoffice-help-slUpgrade autocorr-frUpgrade libreoffice-impressUpgrade autocorr-deUpgrade libreoffice-help-euUpgrade libreoffice-langpack-plUpgrade libreoffice-langpack-siUpgrade libreoffice-langpack-ltUpgrade libreoffice-x11Upgrade libreoffice-help-daUpgrade libreoffice-help-ltUpgrade autocorr-ltUpgrade libreoffice-langpack-hiUpgrade libreoffice-help-koUpgrade libreoffice-langpack-cyUpgrade autocorr-bgUpgrade libreoffice-mathUpgrade libreoffice-langpack-fiUpgrade libreofficekitUpgrade autocorr-huUpgrade libreoffice-help-hrUpgrade libreoffice-langpack-ukUpgrade libreoffice-help-zh-HantUpgrade libreoffice-langpack-nbUpgrade libreoffice-langpack-jaUpgrade libreoffice-langpack-enUpgrade libreoffice-langpack-knUpgrade libreoffice-langpack-brUpgrade autocorr-afUpgrade libreoffice-help-nbUpgrade libreoffice-xsltfilterUpgrade autocorr-fiUpgrade libreoffice-help-frUpgrade libreoffice-writerUpgrade libreoffice-langpack-euUpgrade libreoffice-langpack-trUpgrade libreoffice-wiki-publisherUpgrade libreoffice-langpack-mrUpgrade autocorr-slUpgrade libreoffice-gtk2Upgrade autocorr-esUpgrade libreoffice-langpack-koUpgrade libreoffice-help-bnUpgrade autocorr-nlUpgrade libreoffice-langpack-csUpgrade libreoffice-langpack-idUpgrade libreoffice-emailmergeUpgrade libreoffice-langpack-heUpgrade libreoffice-langpack-daUpgrade libreoffice-help-hiUpgrade libreoffice-pyunoUpgrade libreoffice-nlpsolverUpgrade libreoffice-help-ukUpgrade libreoffice-langpack-stUpgrade libreoffice-langpack-bgNo solution existsUpgrade libreoffice-help-etUpgrade libreoffice-langpack-nsoUpgrade libreoffice-help-huUpgrade autocorr-ptUpgrade libreoffice-help-pt-BRUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-caUpgrade libreoffice-langpack-huUpgrade libreoffice-langpack-zuUpgrade libreoffice-langpack-bnUpgrade libreoffice-sdkUpgrade libreoffice-langpack-glUpgrade autocorr-trUpgrade libreoffice-langpack-thUpgrade libreoffice-sdk-docUpgrade libreofficekit-develUpgrade libreoffice-baseUpgrade libreoffice-help-roUpgrade libreoffice-langpack-nrUpgrade libreoffice-help-dzUpgrade libreoffice-langpack-dzUpgrade libreoffice-help-nlUpgrade libreoffice-langpack-maiUpgrade autocorr-plUpgrade libreoffice-help-siUpgrade libreoffice-help-svUpgrade libreoffice-help-fiUpgrade autocorr-isUpgrade libreoffice-langpack-deUpgrade libreoffice-help-itUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-langpack-itUpgrade libreoffice-help-heUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-debuginfoUpgrade libreoffice-langpack-mlUpgrade libreoffice-langpack-pt-PTUpgrade libreoffice-bshUpgrade libreoffice-drawUpgrade libreoffice-help-jaUpgrade libreoffice-officebeanUpgrade libreoffice-langpack-veUpgrade libreoffice-langpack-taUpgrade libreoffice-help-nnUpgrade libreoffice-gtk3Upgrade libreoffice-rhinoUpgrade libreoffice-dataUpgrade autocorr-itUpgrade libreoffice-langpack-srUpgrade libreoffice-postgresqlUpgrade libreoffice-help-trUpgrade libreoffice-langpack-nnUpgrade autocorr-daUpgrade libreoffice-langpack-afUpgrade libreoffice-langpack-xhUpgrade libreoffice-help-guUpgrade libreoffice-ure-commonUpgrade autocorr-lbUpgrade libreoffice-help-ruUpgrade autocorr-mnUpgrade libreoffice-help-zh-HansUpgrade libreoffice-librelogoUpgrade libreoffice-help-taUpgrade autocorr-csUpgrade libreoffice-officebean-commonUpgrade libreoffice-help-plUpgrade autocorr-koUpgrade libreoffice-langpack-slUpgrade autocorr-gaUpgrade libreoffice-help-elUpgrade autocorr-caUpgrade libreoffice-langpack-elUpgrade libreoffice-filtersUpgrade libreofficeUpgrade libreoffice-langpack-pt-BRUpgrade autocorr-hrUpgrade autocorr-srUpgrade libreoffice-langpack-orUpgrade libreoffice-help-arUpgrade autocorr-skUpgrade autocorr-svUpgrade autocorr-zhUpgrade libreoffice-calcUpgrade libreoffice-langpack-ssUpgrade libreoffice-help-esUpgrade libreoffice-help-glUpgrade autocorr-roUpgrade libreoffice-ogltransUpgrade libreoffice-langpack-lvUpgrade libreoffice-langpack-arUpgrade libreoffice-coreUpgrade libreoffice-langpack-nlUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-ureUpgrade libreoffice-gladeUpgrade libreoffice-graphicfilterUpgrade libreoffice-help-bgUpgrade libreoffice-langpack-gaUpgrade libreoffice-langpack-teUpgrade libreoffice-langpack-skUpgrade libreoffice-langpack-asUpgrade libreoffice-langpack-faUpgrade libreoffice-langpack-kkUpgrade libreoffice-help-lvUpgrade libreoffice-help-skUpgrade libreoffice-langpack-esUpgrade libreoffice-langpack-guUpgrade libreoffice-help-idUpgrade libreoffice-langpack-svUpgrade libreoffice-help-deUpgrade libreoffice-langpack-ruUpgrade autocorr-viUpgrade libreoffice-langpack-tsUpgrade libreoffice-help-ca | Oct 31, 2018 | Apr 16, 2018 |
| Suse | — | Upgrade libreoffice-l10n-en_zaUpgrade libreoffice-l10n-myUpgrade libreoffice-l10n-deUpgrade libreoffice-l10n-amUpgrade libreofficekit-develUpgrade libreoffice-qt5Upgrade libreoffice-l10n-taUpgrade libreoffice-l10n-sa_inUpgrade libreoffice-l10n-caUpgrade libreoffice-l10n-nrUpgrade libreoffice-l10n-ocUpgrade libreoffice-l10n-maiUpgrade libreoffice-l10n-kaUpgrade libreoffice-sdk-docUpgrade libreoffice-l10n-bsUpgrade libreoffice-l10n-sdUpgrade libreoffice-l10n-pt_BRUpgrade libreoffice-calc-extensionsUpgrade libreoffice-l10n-kabUpgrade libreoffice-l10n-bn_inUpgrade libreoffice-l10n-bgUpgrade libreoffice-l10n-hrUpgrade libreoffice-l10n-tgUpgrade libreoffice-l10n-dsbUpgrade libreoffice-l10n-omUpgrade libreoffice-l10n-guUpgrade libreoffice-l10n-mnUpgrade libreoffice-l10n-xhUpgrade libreoffice-sdkUpgrade libreoffice-baseUpgrade libreoffice-l10n-faUpgrade libreoffice-l10n-ckbUpgrade libreoffice-l10n-heUpgrade libreoffice-l10n-jaUpgrade libreoffice-l10n-mrUpgrade libreoffice-l10n-cyUpgrade libreoffice-l10n-slUpgrade libreoffice-l10n-bnUpgrade libreoffice-l10n-hsbUpgrade libreoffice-l10n-szlUpgrade libreoffice-librelogoUpgrade libreoffice-l10n-dzUpgrade libreoffice-l10n-trUpgrade libreoffice-l10n-gugUpgrade libreoffice-writerUpgrade libreoffice-l10n-eoUpgrade libreoffice-l10n-mkUpgrade libreoffice-l10n-afUpgrade libreoffice-l10n-furUpgrade libreoffice-l10n-beUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-l10n-pt_PTUpgrade libreoffice-gtk2Upgrade libreoffice-l10n-roUpgrade libreofficekitUpgrade libreoffice-l10n-zh_TWUpgrade libreoffice-l10n-skUpgrade libreoffice-l10n-svUpgrade libreoffice-l10n-tnUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-satUpgrade libreoffice-l10n-mlUpgrade libreoffice-gnomeUpgrade libreoffice-l10n-boUpgrade libreoffice-impressUpgrade libreoffice-l10n-stUpgrade libreoffice-l10n-etUpgrade libreoffice-l10n-vecUpgrade libreoffice-l10n-ttUpgrade libreoffice-l10n-zh_CNUpgrade libreoffice-l10n-koUpgrade libreoffice-gladeUpgrade libreoffice-calcUpgrade libreoffice-l10n-gdUpgrade libreoffice-kde4Upgrade libreoffice-l10n-sw_tzUpgrade libreoffice-l10n-daUpgrade libreoffice-mathUpgrade libreoffice-pyunoUpgrade libreoffice-l10n-hiUpgrade libreoffice-l10n-siUpgrade libreoffice-l10n-thUpgrade libreoffice-l10n-fiUpgrade libreoffice-l10n-nlUpgrade libreoffice-l10n-ruUpgrade libreoffice-l10n-veUpgrade libreoffice-l10n-loUpgrade libreoffice-l10n-srUpgrade libreofficeUpgrade libreoffice-l10n-neUpgrade libreoffice-l10n-fyUpgrade libreoffice-l10n-zuUpgrade libreoffice-l10n-astUpgrade libreoffice-l10n-paUpgrade libreoffice-l10n-sqUpgrade libreoffice-l10n-arUpgrade libreoffice-l10n-huUpgrade libreoffice-mailmergeUpgrade libreoffice-l10n-itUpgrade libreoffice-l10n-ltUpgrade libreoffice-icon-themesUpgrade libreoffice-filters-optionalUpgrade libreoffice-branding-upstreamUpgrade libreoffice-l10n-plUpgrade libreoffice-l10n-frUpgrade libreoffice-l10n-mniUpgrade libreoffice-l10n-idUpgrade libreoffice-drawUpgrade libreoffice-l10n-brxUpgrade libreoffice-l10n-kmr_latnUpgrade libreoffice-l10n-orUpgrade libreoffice-l10n-uzUpgrade libreoffice-l10n-sidUpgrade libreoffice-l10n-knUpgrade libreoffice-l10n-viUpgrade libreoffice-l10n-teUpgrade libreoffice-l10n-nsoUpgrade libreoffice-l10n-nbUpgrade libreoffice-l10n-dgoUpgrade libreoffice-l10n-esUpgrade libreoffice-l10n-kokUpgrade libreoffice-l10n-en_gbUpgrade libreoffice-l10n-asUpgrade libreoffice-l10n-kkUpgrade libreoffice-l10n-elUpgrade libreoffice-base-drivers-mysqlUpgrade libreoffice-l10n-ksUpgrade libreoffice-l10n-ukUpgrade libreoffice-officebeanUpgrade libreoffice-l10n-brUpgrade libreoffice-l10n-csUpgrade libreoffice-gtk3Upgrade libreoffice-l10n-ca_valenciaUpgrade libreoffice-l10n-gaUpgrade libreoffice-l10n-tsUpgrade libreoffice-l10n-ssUpgrade libreoffice-l10n-ugUpgrade libreoffice-writer-extensionsUpgrade libreoffice-l10n-glUpgrade libreoffice-l10n-nnUpgrade libreoffice-l10n-euUpgrade libreoffice-l10n-lvUpgrade libreoffice-l10n-lbUpgrade libreoffice-gdb-pretty-printersUpgrade libreoffice-l10n-rwUpgrade libreoffice-l10n-isUpgrade libreoffice-l10n-km | May 16, 2018 | Apr 16, 2018 |
| Ubuntu | — | Upgrade libreoffice-core | Feb 14, 2019 | Apr 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub