sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreoffice-langpack-siUpgrade libreoffice-langpack-asUpgrade autocorr-koUpgrade libreoffice-help-taUpgrade autocorr-esUpgrade autocorr-ptUpgrade autocorr-caUpgrade libreoffice-help-skUpgrade libreoffice-langpack-tsUpgrade autocorr-skUpgrade autocorr-srUpgrade libreoffice-help-heUpgrade libreoffice-langpack-daUpgrade libreoffice-langpack-ukUpgrade libreoffice-sdk-docUpgrade autocorr-slUpgrade libreoffice-calcUpgrade libreoffice-gdb-debug-supportUpgrade autocorr-ltUpgrade libreoffice-help-fiUpgrade libreoffice-officebeanUpgrade libreoffice-langpack-nbUpgrade libreoffice-langpack-mlUpgrade libreoffice-bshUpgrade libreoffice-help-lvUpgrade libreoffice-langpack-tnUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-langpack-thUpgrade autocorr-viUpgrade autocorr-plUpgrade libreoffice-langpack-brUpgrade autocorr-afUpgrade libreoffice-langpack-knUpgrade libreoffice-help-csUpgrade libreoffice-langpack-lvUpgrade autocorr-deUpgrade libreoffice-help-ruUpgrade libreoffice-langpack-elUpgrade libreoffice-langpack-hrUpgrade libreoffice-coreUpgrade libreoffice-langpack-etUpgrade libreoffice-langpack-frUpgrade libreoffice-help-idUpgrade libreoffice-langpack-huUpgrade libreoffice-help-daUpgrade autocorr-zhUpgrade autocorr-csUpgrade libreoffice-pdfimportUpgrade libreoffice-help-frUpgrade libreoffice-gtk2Upgrade libreoffice-langpack-deUpgrade libreoffice-langpack-pt-PTUpgrade autocorr-lbUpgrade libreoffice-help-huUpgrade autocorr-svUpgrade libreoffice-help-caUpgrade libreoffice-debuginfoUpgrade libreoffice-ureUpgrade libreoffice-mathUpgrade libreoffice-langpack-svUpgrade libreoffice-filtersUpgrade libreoffice-langpack-skUpgrade libreoffice-help-zh-HantUpgrade libreoffice-help-pt-BRUpgrade libreoffice-graphicfilterUpgrade libreoffice-langpack-stUpgrade libreoffice-nlpsolverUpgrade autocorr-hrUpgrade libreoffice-officebean-commonUpgrade libreoffice-ogltransUpgrade libreoffice-help-hrUpgrade libreoffice-x11Upgrade libreoffice-help-arUpgrade libreoffice-help-deUpgrade libreoffice-langpack-teUpgrade libreoffice-langpack-xhUpgrade libreoffice-langpack-bnUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-help-esUpgrade libreoffice-langpack-faUpgrade libreoffice-langpack-glUpgrade libreoffice-langpack-dzUpgrade libreoffice-help-ltUpgrade libreoffice-help-slUpgrade autocorr-itUpgrade libreoffice-langpack-enUpgrade libreoffice-langpack-trUpgrade autocorr-daUpgrade libreoffice-help-elUpgrade libreoffice-help-nlUpgrade libreoffice-langpack-heUpgrade libreoffice-ure-commonUpgrade libreoffice-langpack-cyUpgrade libreoffice-dataUpgrade autocorr-roUpgrade libreoffice-help-hiUpgrade libreoffice-langpack-kkUpgrade libreoffice-sdkUpgrade libreoffice-help-nnUpgrade libreoffice-help-bgUpgrade libreoffice-langpack-nrUpgrade libreoffice-help-roUpgrade libreoffice-help-dzUpgrade libreoffice-help-euUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-help-trUpgrade libreoffice-langpack-nnUpgrade libreoffice-langpack-gaUpgrade libreoffice-help-ukUpgrade autocorr-isUpgrade libreoffice-wiki-publisherUpgrade libreoffice-help-bnUpgrade libreoffice-langpack-euUpgrade libreoffice-help-siUpgrade libreoffice-langpack-hiUpgrade libreoffice-help-nbUpgrade libreoffice-langpack-fiUpgrade autocorr-fiUpgrade libreoffice-langpack-mrUpgrade libreoffice-langpack-slUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-guUpgrade libreoffice-gladeUpgrade libreoffice-help-itUpgrade libreoffice-langpack-nlUpgrade libreoffice-langpack-idUpgrade libreoffice-langpack-bgUpgrade autocorr-ruUpgrade libreoffice-langpack-orUpgrade libreoffice-langpack-arUpgrade autocorr-jaUpgrade libreofficekit-develUpgrade libreoffice-help-jaUpgrade libreoffice-langpack-maiUpgrade autocorr-faUpgrade libreoffice-help-koUpgrade libreoffice-impressUpgrade libreoffice-rhinoUpgrade autocorr-mnUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-csUpgrade libreoffice-baseUpgrade libreoffice-writerUpgrade libreoffice-langpack-afUpgrade libreoffice-langpack-nsoUpgrade autocorr-bgUpgrade libreoffice-drawUpgrade libreoffice-xsltfilterUpgrade libreoffice-help-pt-PTUpgrade autocorr-nlUpgrade libreoffice-help-plUpgrade libreoffice-librelogoUpgrade autocorr-huUpgrade autocorr-gaUpgrade libreoffice-help-svUpgrade libreoffice-langpack-ltUpgrade libreoffice-gtk3Upgrade libreoffice-pyunoUpgrade libreoffice-langpack-jaUpgrade libreoffice-help-etUpgrade libreoffice-langpack-esUpgrade libreoffice-help-glUpgrade libreoffice-langpack-plUpgrade libreoffice-langpack-ssUpgrade libreoffice-langpack-taUpgrade libreoffice-langpack-srUpgrade libreoffice-langpack-koUpgrade libreoffice-emailmergeUpgrade autocorr-enUpgrade libreofficeUpgrade libreoffice-langpack-caUpgrade libreoffice-help-guUpgrade libreoffice-help-zh-HansUpgrade libreoffice-postgresqlUpgrade autocorr-trUpgrade autocorr-frUpgrade libreoffice-langpack-ruUpgrade libreoffice-langpack-veUpgrade libreoffice-langpack-zuUpgrade libreoffice-langpack-itUpgrade libreofficekit | Aug 28, 2019 | Apr 16, 2018 |
| Debian | — | Upgrade libreoffice | Apr 21, 2018 | Apr 16, 2018 |
| Redhat_linux | — | Upgrade autocorr-hrUpgrade autocorr-zhUpgrade libreoffice-ure-commonUpgrade libreofficeUpgrade libreoffice-ureUpgrade autocorr-daUpgrade libreoffice-help-ruUpgrade libreoffice-langpack-afUpgrade libreoffice-langpack-xhUpgrade autocorr-lbUpgrade libreoffice-help-heUpgrade libreoffice-postgresqlUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-langpack-nnUpgrade autocorr-mnUpgrade libreoffice-debuginfoUpgrade autocorr-skUpgrade libreoffice-langpack-asUpgrade libreoffice-langpack-ruUpgrade libreoffice-langpack-kkUpgrade libreoffice-officebean-commonUpgrade autocorr-itUpgrade libreoffice-langpack-skUpgrade libreoffice-langpack-itUpgrade libreoffice-langpack-esUpgrade libreoffice-drawUpgrade libreoffice-ogltransUpgrade libreoffice-langpack-orUpgrade libreoffice-langpack-srUpgrade libreoffice-help-lvUpgrade libreoffice-librelogoUpgrade libreoffice-langpack-taUpgrade libreoffice-rhinoUpgrade libreoffice-calcUpgrade libreoffice-langpack-slUpgrade autocorr-srUpgrade autocorr-koUpgrade libreoffice-help-idUpgrade libreoffice-help-jaUpgrade libreoffice-langpack-veUpgrade libreoffice-help-skUpgrade libreoffice-help-caUpgrade autocorr-caUpgrade libreoffice-help-bgUpgrade libreoffice-langpack-gaUpgrade libreoffice-help-nnUpgrade autocorr-csUpgrade libreoffice-langpack-ssUpgrade libreoffice-langpack-pt-PTUpgrade libreoffice-help-deUpgrade libreoffice-langpack-nlUpgrade libreoffice-help-esUpgrade libreoffice-langpack-guUpgrade autocorr-roUpgrade libreoffice-langpack-lvUpgrade libreoffice-help-arUpgrade libreoffice-dataUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-help-glUpgrade libreoffice-langpack-svUpgrade libreoffice-help-elUpgrade autocorr-gaUpgrade libreoffice-langpack-deUpgrade libreoffice-coreUpgrade libreoffice-langpack-arUpgrade libreoffice-help-fiUpgrade libreoffice-help-trUpgrade libreoffice-help-zh-HansUpgrade libreoffice-graphicfilterUpgrade libreoffice-help-plUpgrade libreoffice-langpack-teUpgrade autocorr-viUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-help-itUpgrade libreoffice-langpack-tsUpgrade autocorr-svUpgrade libreoffice-help-taUpgrade libreoffice-langpack-faUpgrade libreoffice-filtersUpgrade libreoffice-gladeUpgrade autocorr-isUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-bshUpgrade libreoffice-officebeanUpgrade libreoffice-langpack-elUpgrade libreoffice-langpack-mlUpgrade libreoffice-help-guUpgrade libreoffice-gtk3Upgrade libreoffice-langpack-fiUpgrade libreoffice-nlpsolverUpgrade libreoffice-gtk2Upgrade libreoffice-help-csUpgrade autocorr-enUpgrade libreoffice-langpack-etUpgrade libreoffice-langpack-enUpgrade libreoffice-help-siUpgrade libreoffice-help-pt-PTUpgrade libreoffice-langpack-daUpgrade libreoffice-langpack-bgNo solution existsUpgrade libreoffice-langpack-nsoUpgrade libreoffice-langpack-csUpgrade autocorr-ptUpgrade libreoffice-help-ukUpgrade libreoffice-help-hrUpgrade libreoffice-help-hiUpgrade libreoffice-help-nlUpgrade libreoffice-langpack-jaUpgrade libreoffice-langpack-zuUpgrade libreoffice-sdkUpgrade libreoffice-langpack-nrUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-euUpgrade libreoffice-impressUpgrade libreoffice-emailmergeUpgrade libreoffice-langpack-huUpgrade autocorr-bgUpgrade libreoffice-help-koUpgrade libreoffice-help-etUpgrade libreoffice-langpack-hiUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-langpack-knUpgrade libreoffice-langpack-bnUpgrade libreoffice-help-nbUpgrade libreoffice-help-euUpgrade libreoffice-langpack-hrUpgrade libreoffice-langpack-frUpgrade libreoffice-help-huUpgrade libreofficekit-develUpgrade libreoffice-help-slUpgrade autocorr-fiUpgrade libreoffice-langpack-dzUpgrade libreoffice-help-daUpgrade autocorr-plUpgrade autocorr-ltUpgrade libreoffice-langpack-idUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-stUpgrade libreoffice-langpack-trUpgrade libreoffice-langpack-tnUpgrade libreoffice-langpack-heUpgrade libreoffice-langpack-maiUpgrade autocorr-slUpgrade libreoffice-pyunoUpgrade libreoffice-mathUpgrade libreoffice-help-ltUpgrade libreoffice-langpack-thUpgrade libreoffice-langpack-cyUpgrade autocorr-esUpgrade libreoffice-langpack-ltUpgrade autocorr-faUpgrade libreoffice-langpack-ukUpgrade libreoffice-help-frUpgrade libreoffice-help-pt-BRUpgrade libreoffice-langpack-koUpgrade autocorr-frUpgrade autocorr-deUpgrade libreofficekitUpgrade libreoffice-writerUpgrade libreoffice-wiki-publisherUpgrade libreoffice-langpack-glUpgrade libreoffice-langpack-siUpgrade libreoffice-langpack-mrUpgrade libreoffice-x11Upgrade autocorr-nlUpgrade libreoffice-langpack-brUpgrade libreoffice-langpack-caUpgrade libreoffice-help-bnUpgrade autocorr-huUpgrade libreoffice-langpack-nbUpgrade libreoffice-langpack-plUpgrade libreoffice-xsltfilterUpgrade libreoffice-help-zh-HantUpgrade autocorr-afUpgrade autocorr-ruUpgrade libreoffice-baseUpgrade autocorr-trUpgrade libreoffice-langpack-paUpgrade libreoffice-help-dzUpgrade autocorr-jaUpgrade libreoffice-help-roUpgrade libreoffice-pdfimportUpgrade libreoffice-help-sv | Oct 31, 2018 | Apr 16, 2018 |
| Suse | — | Upgrade libreoffice-l10n-daUpgrade libreoffice-l10n-bgUpgrade libreoffice-l10n-jaUpgrade libreoffice-l10n-xhUpgrade libreoffice-l10n-skUpgrade libreoffice-l10n-mrUpgrade libreoffice-l10n-pt_BRUpgrade libreoffice-l10n-trUpgrade libreoffice-calc-extensionsUpgrade libreoffice-l10n-hrUpgrade libreoffice-l10n-kaUpgrade libreoffice-l10n-kabUpgrade libreoffice-qt5Upgrade libreofficekit-develUpgrade libreoffice-l10n-sdUpgrade libreoffice-l10n-taUpgrade libreoffice-l10n-deUpgrade libreoffice-l10n-ocUpgrade libreoffice-l10n-furUpgrade libreoffice-l10n-afUpgrade libreoffice-sdkUpgrade libreoffice-l10n-bsUpgrade libreoffice-l10n-nrUpgrade libreoffice-l10n-boUpgrade libreoffice-kde4Upgrade libreoffice-l10n-vecUpgrade libreoffice-l10n-szlUpgrade libreoffice-impressUpgrade libreoffice-l10n-cyUpgrade libreoffice-l10n-mkUpgrade libreoffice-l10n-tgUpgrade libreoffice-l10n-faUpgrade libreoffice-l10n-slUpgrade libreoffice-writerUpgrade libreoffice-pyunoUpgrade libreoffice-l10n-sw_tzUpgrade libreoffice-l10n-heUpgrade libreoffice-l10n-maiUpgrade libreoffice-l10n-ckbUpgrade libreoffice-l10n-hsbUpgrade libreoffice-l10n-etUpgrade libreoffice-l10n-bnUpgrade libreoffice-l10n-ttUpgrade libreoffice-l10n-beUpgrade libreoffice-l10n-gugUpgrade libreofficekitUpgrade libreoffice-gnomeUpgrade libreoffice-l10n-dsbUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-l10n-dzUpgrade libreoffice-librelogoUpgrade libreoffice-l10n-en_zaUpgrade libreoffice-l10n-guUpgrade libreoffice-l10n-bn_inUpgrade libreoffice-l10n-sa_inUpgrade libreoffice-l10n-stUpgrade libreoffice-l10n-caUpgrade libreoffice-l10n-myUpgrade libreoffice-l10n-mnUpgrade libreoffice-l10n-omUpgrade libreoffice-l10n-eoUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-pt_PTUpgrade libreoffice-l10n-roUpgrade libreoffice-calcUpgrade libreoffice-gladeUpgrade libreoffice-l10n-gdUpgrade libreoffice-l10n-tnUpgrade libreoffice-l10n-satUpgrade libreoffice-l10n-koUpgrade libreoffice-mathUpgrade libreoffice-l10n-zh_TWUpgrade libreoffice-l10n-hiUpgrade libreoffice-l10n-amUpgrade libreoffice-l10n-svUpgrade libreoffice-sdk-docUpgrade libreoffice-baseUpgrade libreoffice-gtk2Upgrade libreoffice-l10n-mlUpgrade libreoffice-l10n-zh_CNUpgrade libreoffice-l10n-uzUpgrade libreoffice-l10n-teUpgrade libreoffice-l10n-elUpgrade libreoffice-l10n-kokUpgrade libreoffice-l10n-huUpgrade libreoffice-l10n-itUpgrade libreoffice-l10n-ugUpgrade libreoffice-l10n-ukUpgrade libreoffice-gtk3Upgrade libreoffice-l10n-euUpgrade libreoffice-l10n-fyUpgrade libreoffice-l10n-asUpgrade libreoffice-l10n-kmr_latnUpgrade libreoffice-l10n-dgoUpgrade libreoffice-l10n-viUpgrade libreoffice-l10n-nbUpgrade libreoffice-l10n-ssUpgrade libreoffice-l10n-tsUpgrade libreoffice-l10n-nsoUpgrade libreoffice-l10n-gaUpgrade libreoffice-l10n-veUpgrade libreoffice-l10n-ca_valenciaUpgrade libreoffice-l10n-fiUpgrade libreoffice-l10n-astUpgrade libreoffice-l10n-loUpgrade libreoffice-l10n-plUpgrade libreoffice-icon-themesUpgrade libreoffice-branding-upstreamUpgrade libreoffice-filters-optionalUpgrade libreoffice-l10n-mniUpgrade libreoffice-l10n-nlUpgrade libreoffice-l10n-ltUpgrade libreoffice-l10n-frUpgrade libreoffice-l10n-glUpgrade libreoffice-writer-extensionsUpgrade libreoffice-l10n-ksUpgrade libreoffice-officebeanUpgrade libreoffice-l10n-idUpgrade libreoffice-l10n-srUpgrade libreoffice-l10n-kkUpgrade libreofficeUpgrade libreoffice-l10n-en_gbUpgrade libreoffice-drawUpgrade libreoffice-l10n-csUpgrade libreoffice-l10n-esUpgrade libreoffice-base-drivers-mysqlUpgrade libreoffice-l10n-neUpgrade libreoffice-l10n-brUpgrade libreoffice-l10n-nnUpgrade libreoffice-l10n-orUpgrade libreoffice-l10n-lbUpgrade libreoffice-l10n-sidUpgrade libreoffice-l10n-knUpgrade libreoffice-l10n-brxUpgrade libreoffice-mailmergeUpgrade libreoffice-l10n-siUpgrade libreoffice-l10n-thUpgrade libreoffice-l10n-paUpgrade libreoffice-l10n-isUpgrade libreoffice-l10n-sqUpgrade libreoffice-l10n-rwUpgrade libreoffice-l10n-zuUpgrade libreoffice-l10n-ruUpgrade libreoffice-gdb-pretty-printersUpgrade libreoffice-l10n-lvUpgrade libreoffice-l10n-arUpgrade libreoffice-l10n-km | May 16, 2018 | Apr 16, 2018 |
| Ubuntu | — | Upgrade libreoffice-core | Feb 14, 2019 | Apr 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub