sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreoffice-langpack-caUpgrade autocorr-itUpgrade autocorr-jaUpgrade libreoffice-langpack-csUpgrade autocorr-faUpgrade libreoffice-langpack-nlUpgrade libreoffice-help-koUpgrade libreoffice-ure-commonUpgrade libreoffice-emailmergeUpgrade libreoffice-help-elUpgrade libreoffice-langpack-veUpgrade libreoffice-langpack-guUpgrade autocorr-fiUpgrade libreoffice-gladeUpgrade libreoffice-langpack-slUpgrade libreoffice-help-guUpgrade autocorr-trUpgrade libreoffice-librelogoUpgrade libreoffice-langpack-kkUpgrade libreoffice-help-jaUpgrade libreoffice-help-zh-HansUpgrade libreoffice-impressUpgrade libreoffice-langpack-fiUpgrade libreoffice-help-ltUpgrade autocorr-ruUpgrade libreoffice-langpack-hiUpgrade libreoffice-help-nbUpgrade libreoffice-langpack-dzUpgrade libreoffice-langpack-nsoUpgrade libreoffice-help-siUpgrade autocorr-bgUpgrade libreoffice-help-roUpgrade libreoffice-langpack-zuUpgrade libreoffice-postgresqlUpgrade libreoffice-dataUpgrade libreoffice-writerUpgrade libreoffice-langpack-srUpgrade libreoffice-langpack-heUpgrade autocorr-frUpgrade libreoffice-langpack-trUpgrade libreoffice-help-hiUpgrade autocorr-mnUpgrade libreoffice-help-pt-PTUpgrade libreoffice-langpack-plUpgrade autocorr-huUpgrade libreoffice-langpack-jaUpgrade libreoffice-help-slUpgrade autocorr-gaUpgrade autocorr-roUpgrade libreoffice-help-bnUpgrade libreofficeUpgrade libreoffice-langpack-esUpgrade libreoffice-gtk3Upgrade libreoffice-langpack-ltUpgrade libreoffice-help-etUpgrade libreoffice-help-glUpgrade libreoffice-help-svUpgrade libreoffice-wiki-publisherUpgrade libreoffice-help-ukUpgrade autocorr-isUpgrade libreoffice-langpack-bgUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-help-euUpgrade libreoffice-help-dzUpgrade libreoffice-help-bgUpgrade libreoffice-langpack-gaUpgrade libreoffice-pyunoUpgrade libreoffice-help-nlUpgrade libreoffice-langpack-nnUpgrade libreoffice-help-trUpgrade libreoffice-help-itUpgrade libreoffice-langpack-cyUpgrade libreoffice-langpack-ruUpgrade libreofficekitUpgrade libreoffice-langpack-itUpgrade autocorr-nlUpgrade autocorr-enUpgrade libreoffice-xsltfilterUpgrade libreoffice-rhinoUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-enUpgrade libreoffice-langpack-mrUpgrade libreoffice-sdkUpgrade libreoffice-baseUpgrade libreoffice-langpack-maiUpgrade libreoffice-help-nnUpgrade libreoffice-langpack-idUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-taUpgrade libreoffice-langpack-ssUpgrade libreoffice-langpack-koUpgrade autocorr-daUpgrade libreoffice-langpack-nrUpgrade libreofficekit-develUpgrade libreoffice-help-plUpgrade libreoffice-langpack-arUpgrade libreoffice-langpack-afUpgrade libreoffice-langpack-euUpgrade libreoffice-langpack-orUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-drawUpgrade libreoffice-help-arUpgrade libreoffice-help-heUpgrade autocorr-deUpgrade libreoffice-langpack-nbUpgrade libreoffice-help-frUpgrade libreoffice-ureUpgrade libreoffice-officebeanUpgrade libreoffice-langpack-elUpgrade libreoffice-langpack-tsUpgrade libreoffice-ogltransUpgrade autocorr-viUpgrade libreoffice-x11Upgrade libreoffice-filtersUpgrade autocorr-srUpgrade libreoffice-langpack-deUpgrade libreoffice-help-deUpgrade libreoffice-langpack-tnUpgrade libreoffice-langpack-hrUpgrade libreoffice-langpack-daUpgrade autocorr-slUpgrade libreoffice-help-zh-HantUpgrade libreoffice-langpack-bnUpgrade libreoffice-nlpsolverUpgrade libreoffice-calcUpgrade autocorr-lbUpgrade libreoffice-officebean-commonUpgrade autocorr-hrUpgrade libreoffice-langpack-frUpgrade libreoffice-help-pt-BRUpgrade libreoffice-help-daUpgrade libreoffice-langpack-etUpgrade libreoffice-help-esUpgrade libreoffice-help-hrUpgrade libreoffice-pdfimportUpgrade libreoffice-langpack-glUpgrade libreoffice-help-csUpgrade autocorr-caUpgrade libreoffice-langpack-teUpgrade autocorr-skUpgrade libreoffice-help-idUpgrade libreoffice-langpack-svUpgrade libreoffice-langpack-xhUpgrade libreoffice-langpack-zh-HantUpgrade autocorr-ltUpgrade libreoffice-help-caUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-langpack-knUpgrade libreoffice-debuginfoUpgrade autocorr-csUpgrade autocorr-svUpgrade autocorr-koUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-langpack-asUpgrade libreoffice-help-lvUpgrade autocorr-esUpgrade libreoffice-langpack-siUpgrade autocorr-zhUpgrade libreoffice-langpack-lvUpgrade libreoffice-help-ruUpgrade libreoffice-langpack-huUpgrade libreoffice-mathUpgrade libreoffice-help-taUpgrade libreoffice-langpack-faUpgrade autocorr-plUpgrade libreoffice-bshUpgrade libreoffice-help-fiUpgrade libreoffice-langpack-pt-PTUpgrade libreoffice-langpack-mlUpgrade libreoffice-graphicfilterUpgrade autocorr-afUpgrade libreoffice-help-skUpgrade libreoffice-coreUpgrade libreoffice-langpack-ukUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-stUpgrade libreoffice-langpack-thUpgrade libreoffice-help-huUpgrade libreoffice-langpack-skUpgrade libreoffice-langpack-brUpgrade libreoffice-gtk2Upgrade autocorr-pt | Aug 28, 2019 | Apr 16, 2018 |
| Debian | — | Upgrade libreoffice | Apr 21, 2018 | Apr 16, 2018 |
| Redhat_linux | — | Upgrade libreoffice-filtersUpgrade libreoffice-langpack-esUpgrade libreoffice-help-idUpgrade autocorr-skUpgrade libreoffice-postgresqlUpgrade libreoffice-help-guUpgrade autocorr-zhUpgrade libreoffice-help-skUpgrade libreoffice-langpack-tsUpgrade libreoffice-langpack-mlUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-debuginfoUpgrade libreoffice-help-caUpgrade libreoffice-officebeanUpgrade libreoffice-help-zh-HansUpgrade autocorr-lbUpgrade libreofficeUpgrade libreoffice-rhinoUpgrade autocorr-svUpgrade libreoffice-help-glUpgrade libreoffice-ogltransUpgrade libreoffice-langpack-guUpgrade libreoffice-ure-commonUpgrade autocorr-hrUpgrade libreoffice-langpack-srUpgrade autocorr-caUpgrade libreoffice-librelogoUpgrade libreoffice-langpack-elUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-langpack-svUpgrade libreoffice-langpack-kkUpgrade libreoffice-langpack-lvUpgrade autocorr-viUpgrade libreoffice-graphicfilterUpgrade libreoffice-langpack-taUpgrade libreoffice-langpack-itUpgrade libreoffice-ureUpgrade libreoffice-gladeUpgrade libreoffice-help-deUpgrade autocorr-srUpgrade libreoffice-help-heUpgrade libreoffice-langpack-orUpgrade autocorr-gaUpgrade libreoffice-drawUpgrade libreoffice-calcUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-help-fiUpgrade libreoffice-langpack-nlUpgrade libreoffice-help-lvUpgrade libreoffice-langpack-pt-PTUpgrade libreoffice-help-elUpgrade libreoffice-langpack-asUpgrade autocorr-roUpgrade libreoffice-help-esUpgrade autocorr-isUpgrade libreoffice-langpack-skUpgrade libreoffice-langpack-ruUpgrade libreoffice-langpack-afUpgrade libreoffice-langpack-faUpgrade libreoffice-help-plUpgrade libreoffice-langpack-ssUpgrade libreoffice-langpack-nnUpgrade libreoffice-help-jaUpgrade autocorr-mnUpgrade libreoffice-officebean-commonUpgrade libreoffice-help-ruUpgrade libreoffice-coreUpgrade libreoffice-gtk3Upgrade libreoffice-langpack-xhUpgrade libreoffice-help-bgUpgrade libreoffice-langpack-deUpgrade libreoffice-help-itUpgrade autocorr-itUpgrade autocorr-csUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-langpack-gaUpgrade libreoffice-help-arUpgrade libreoffice-help-taUpgrade autocorr-daUpgrade libreoffice-langpack-teUpgrade libreoffice-langpack-arUpgrade libreoffice-bshUpgrade libreoffice-help-trUpgrade autocorr-koUpgrade libreoffice-langpack-slUpgrade libreoffice-dataUpgrade libreoffice-help-nnUpgrade libreoffice-langpack-veUpgrade libreoffice-langpack-maiUpgrade autocorr-enUpgrade autocorr-plUpgrade libreoffice-nlpsolverUpgrade libreoffice-help-pt-PTUpgrade libreoffice-langpack-bgUpgrade libreoffice-sdkUpgrade libreoffice-help-hiUpgrade libreoffice-langpack-zuUpgrade libreoffice-help-ukNo solution existsUpgrade autocorr-nlUpgrade libreoffice-langpack-huUpgrade libreoffice-langpack-stUpgrade libreoffice-langpack-glUpgrade libreoffice-langpack-tnUpgrade libreoffice-langpack-bnUpgrade libreoffice-langpack-mrUpgrade libreoffice-langpack-trUpgrade libreoffice-langpack-hrUpgrade autocorr-faUpgrade libreoffice-pyunoUpgrade libreoffice-langpack-idUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-heUpgrade libreoffice-help-nbUpgrade libreoffice-langpack-paUpgrade libreoffice-help-siUpgrade libreoffice-baseUpgrade libreofficekitUpgrade libreoffice-help-koUpgrade libreoffice-help-euUpgrade libreoffice-langpack-siUpgrade libreoffice-writerUpgrade autocorr-trUpgrade libreoffice-langpack-etUpgrade libreoffice-help-svUpgrade libreoffice-pdfimportUpgrade libreoffice-langpack-csUpgrade libreoffice-langpack-knUpgrade libreoffice-langpack-hiUpgrade libreoffice-help-hrUpgrade libreoffice-langpack-ltUpgrade libreoffice-langpack-nrUpgrade libreoffice-langpack-frUpgrade libreoffice-help-ltUpgrade libreoffice-help-daUpgrade libreoffice-xsltfilterUpgrade libreoffice-help-nlUpgrade libreoffice-langpack-caUpgrade autocorr-afUpgrade autocorr-fiUpgrade libreoffice-help-csUpgrade libreoffice-langpack-roUpgrade libreoffice-help-etUpgrade autocorr-ptUpgrade libreoffice-help-bnUpgrade libreoffice-langpack-thUpgrade libreoffice-emailmergeUpgrade libreoffice-impressUpgrade libreoffice-langpack-daUpgrade libreoffice-help-pt-BRUpgrade libreoffice-langpack-ukUpgrade libreoffice-help-frUpgrade libreoffice-langpack-plUpgrade libreoffice-help-zh-HantUpgrade libreoffice-langpack-euUpgrade libreoffice-mathUpgrade libreoffice-help-slUpgrade libreoffice-help-huUpgrade autocorr-frUpgrade libreoffice-langpack-brUpgrade autocorr-jaUpgrade autocorr-ruUpgrade libreoffice-help-dzUpgrade autocorr-deUpgrade autocorr-ltUpgrade autocorr-slUpgrade libreoffice-x11Upgrade libreoffice-wiki-publisherUpgrade libreoffice-langpack-koUpgrade libreoffice-langpack-jaUpgrade libreofficekit-develUpgrade autocorr-bgUpgrade autocorr-huUpgrade libreoffice-langpack-cyUpgrade libreoffice-langpack-nbUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-langpack-fiUpgrade libreoffice-langpack-nsoUpgrade autocorr-esUpgrade libreoffice-gtk2Upgrade libreoffice-langpack-dzUpgrade libreoffice-langpack-enUpgrade libreoffice-help-ro | Oct 31, 2018 | Apr 16, 2018 |
| Suse | — | Upgrade libreoffice-l10n-fyUpgrade libreoffice-l10n-srUpgrade libreoffice-l10n-en_gbUpgrade libreoffice-drawUpgrade libreoffice-l10n-kmr_latnUpgrade libreoffice-l10n-isUpgrade libreoffice-l10n-thUpgrade libreoffice-l10n-arUpgrade libreoffice-l10n-zuUpgrade libreoffice-l10n-astUpgrade libreoffice-l10n-tsUpgrade libreoffice-l10n-glUpgrade libreoffice-l10n-dgoUpgrade libreoffice-l10n-kmUpgrade libreoffice-l10n-lvUpgrade libreoffice-l10n-knUpgrade libreoffice-l10n-asUpgrade libreoffice-l10n-siUpgrade libreoffice-l10n-ca_valenciaUpgrade libreoffice-l10n-orUpgrade libreoffice-l10n-idUpgrade libreoffice-l10n-brUpgrade libreoffice-l10n-paUpgrade libreoffice-mailmergeUpgrade libreoffice-gtk3Upgrade libreofficeUpgrade libreoffice-l10n-plUpgrade libreoffice-filters-optionalUpgrade libreoffice-l10n-ksUpgrade libreoffice-l10n-uzUpgrade libreoffice-l10n-sidUpgrade libreoffice-l10n-veUpgrade libreoffice-l10n-nlUpgrade libreoffice-l10n-nsoUpgrade libreoffice-l10n-nbUpgrade libreoffice-l10n-viUpgrade libreoffice-l10n-nnUpgrade libreoffice-base-drivers-mysqlUpgrade libreoffice-l10n-ugUpgrade libreoffice-l10n-rwUpgrade libreoffice-icon-themesUpgrade libreoffice-l10n-frUpgrade libreoffice-branding-upstreamUpgrade libreoffice-gdb-pretty-printersUpgrade libreoffice-l10n-itUpgrade libreoffice-l10n-esUpgrade libreoffice-l10n-huUpgrade libreoffice-l10n-euUpgrade libreoffice-l10n-lbUpgrade libreoffice-writer-extensionsUpgrade libreoffice-l10n-loUpgrade libreoffice-l10n-fiUpgrade libreoffice-l10n-teUpgrade libreoffice-l10n-mniUpgrade libreoffice-l10n-brxUpgrade libreoffice-l10n-ltUpgrade libreoffice-l10n-neUpgrade libreoffice-l10n-ssUpgrade libreoffice-l10n-gaUpgrade libreoffice-l10n-csUpgrade libreoffice-officebeanUpgrade libreoffice-l10n-kokUpgrade libreoffice-l10n-ukUpgrade libreoffice-l10n-kkUpgrade libreoffice-l10n-elUpgrade libreoffice-l10n-ruUpgrade libreoffice-l10n-sqUpgrade libreoffice-kde4Upgrade libreoffice-l10n-mrUpgrade libreoffice-l10n-mkUpgrade libreoffice-l10n-etUpgrade libreoffice-l10n-pt_BRUpgrade libreoffice-l10n-kaUpgrade libreoffice-l10n-hrUpgrade libreoffice-calcUpgrade libreoffice-l10n-koUpgrade libreoffice-l10n-dsbUpgrade libreoffice-l10n-svUpgrade libreoffice-l10n-en_zaUpgrade libreoffice-l10n-hsbUpgrade libreoffice-l10n-guUpgrade libreoffice-l10n-mnUpgrade libreoffice-l10n-sw_tzUpgrade libreoffice-l10n-vecUpgrade libreoffice-l10n-faUpgrade libreoffice-l10n-ttUpgrade libreoffice-l10n-furUpgrade libreoffice-l10n-ocUpgrade libreoffice-l10n-szlUpgrade libreofficekit-develUpgrade libreoffice-l10n-sdUpgrade libreoffice-l10n-taUpgrade libreoffice-l10n-deUpgrade libreoffice-qt5Upgrade libreoffice-l10n-nrUpgrade libreoffice-sdkUpgrade libreoffice-l10n-boUpgrade libreoffice-mathUpgrade libreoffice-l10n-bsUpgrade libreoffice-l10n-zh_CNUpgrade libreoffice-l10n-gugUpgrade libreoffice-impressUpgrade libreoffice-l10n-afUpgrade libreoffice-l10n-zh_TWUpgrade libreoffice-l10n-caUpgrade libreoffice-l10n-myUpgrade libreoffice-l10n-tgUpgrade libreoffice-l10n-cyUpgrade libreoffice-pyunoUpgrade libreoffice-writerUpgrade libreoffice-l10n-slUpgrade libreoffice-l10n-bnUpgrade libreoffice-l10n-maiUpgrade libreofficekitUpgrade libreoffice-sdk-docUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-l10n-stUpgrade libreoffice-l10n-beUpgrade libreoffice-gnomeUpgrade libreoffice-l10n-dzUpgrade libreoffice-librelogoUpgrade libreoffice-l10n-eoUpgrade libreoffice-l10n-bn_inUpgrade libreoffice-l10n-sa_inUpgrade libreoffice-l10n-pt_PTUpgrade libreoffice-l10n-hiUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-amUpgrade libreoffice-gtk2Upgrade libreoffice-l10n-skUpgrade libreoffice-l10n-tnUpgrade libreoffice-baseUpgrade libreoffice-l10n-satUpgrade libreoffice-l10n-mlUpgrade libreoffice-l10n-roUpgrade libreoffice-l10n-omUpgrade libreoffice-gladeUpgrade libreoffice-l10n-gdUpgrade libreoffice-l10n-xhUpgrade libreoffice-l10n-ckbUpgrade libreoffice-calc-extensionsUpgrade libreoffice-l10n-trUpgrade libreoffice-l10n-jaUpgrade libreoffice-l10n-heUpgrade libreoffice-l10n-bgUpgrade libreoffice-l10n-daUpgrade libreoffice-l10n-kab | May 16, 2018 | Apr 16, 2018 |
| Ubuntu | — | Upgrade libreoffice-core | Feb 14, 2019 | Apr 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub