Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DSA-4501-1:7A4C9
HistoryAug 15, 2019 - 8:05 p.m.

[SECURITY] [DSA 4501-1] libreoffice security update

2019-08-1520:05:33
lists.debian.org
121

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

0.971 High

EPSS

Percentile

99.8%

JSON

Debian Security Advisory DSA-4501-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
August 15, 2019 https://www.debian.org/security/faq

Package : libreoffice
CVE ID : CVE-2019-9850 CVE-2019-9851 CVE-2019-9852

It was discovered that the code fixes to address CVE-2018-16858 and
CVE-2019-9848 were not complete.

For the oldstable distribution (stretch), these problems have been fixed
in version 1:5.2.7-1+deb9u10.

For the stable distribution (buster), these problems have been fixed in
version 1:6.1.5-3+deb10u3.

We recommend that you upgrade your libreoffice packages.

For the detailed security status of libreoffice please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libreoffice

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian9alllibreoffice-help-ru< 1:5.2.7-1+deb9u10libreoffice-help-ru_1:5.2.7-1+deb9u10_all.deb
Debian9amd64libreoffice-gtk2< 1:5.2.7-1+deb9u10libreoffice-gtk2_1:5.2.7-1+deb9u10_amd64.deb
Debian9i386libreoffice-ogltrans< 1:5.2.7-1+deb9u10libreoffice-ogltrans_1:5.2.7-1+deb9u10_i386.deb
Debian10mips64eluno-libs3-dbgsym< 6.1.5-3+deb10u3uno-libs3-dbgsym_6.1.5-3+deb10u3_mips64el.deb
Debian10mipsellibreoffice-base-drivers-dbgsym< 1:6.1.5-3+deb10u3libreoffice-base-drivers-dbgsym_1:6.1.5-3+deb10u3_mipsel.deb
Debian9mips64ellibreoffice-impress-dbgsym< 1:5.2.7-1+deb9u10libreoffice-impress-dbgsym_1:5.2.7-1+deb9u10_mips64el.deb
Debian9mipsure-dbgsym< 5.2.7-1+deb9u10ure-dbgsym_5.2.7-1+deb9u10_mips.deb
Debian9ppc64ellibreoffice-base-core< 1:5.2.7-1+deb9u10libreoffice-base-core_1:5.2.7-1+deb9u10_ppc64el.deb
Debian9alllibreoffice-help-fi< 1:5.2.7-1+deb9u10libreoffice-help-fi_1:5.2.7-1+deb9u10_all.deb
Debian8alllibreoffice-l10n-oc< 1:4.3.3-2+deb8u13libreoffice-l10n-oc_1:4.3.3-2+deb8u13_all.deb
Rows per page:
1-10 of 17471

Related

nessus 45
thn 3
openvas 31
metasploit 2
suse 3
ubuntu 3
kaspersky 3
exploitpack 1
fedora 6
debian 5
packetstorm 2
zdt 2
exploitdb 2
mageia 2
alpinelinux 5
nvd 6
osv 11
redhatcve 6
ubuntucve 6
prion 6
debiancve 6
cvelist 6
oraclelinux 3
redhat 3
centos 2
cve 6
malwarebytes 1
veracode 5
attackerkb 2
checkpoint_advisories 2
gentoo 1
archlinux 1
nessus
nessus
Debian DSA-4501-1 : libreoffice - security update
2019-08-20 00:00:00
EulerOS 2.0 SP5 : libreoffice (EulerOS-SA-2019-1976)
2019-09-23 00:00:00
EulerOS 2.0 SP8 : libreoffice (EulerOS-SA-2019-2082)
2019-09-30 00:00:00
thn
thn
Patches for 2 Severe LibreOffice Flaws Bypassed — Update to Patch Again
2019-08-16 09:19:00
Severe RCE Flaw Disclosed in Popular LibreOffice and OpenOffice Software
2019-02-05 11:11:00
Just Opening A Document in LibreOffice Can Hack Your Computer (Unpatched)
2019-07-26 14:22:00
openvas
openvas
Huawei EulerOS: Security Advisory for libreoffice (EulerOS-SA-2019-1976)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for libreoffice (EulerOS-SA-2019-2082)
2020-01-23 00:00:00
Debian: Security Advisory (DSA-4501-1)
2019-08-27 00:00:00
metasploit
metasploit
LibreOffice Macro Python Code Execution
2019-07-30 21:07:20
LibreOffice Macro Code Execution
2019-04-12 19:01:29
suse
suse
Security update for libreoffice (important)
2019-09-03 00:00:00
Security update for libreoffice (moderate)
2019-09-25 00:00:00
Security update for LibreOffice (moderate)
2019-08-18 00:00:00
ubuntu
ubuntu
LibreOffice vulnerabilities
2019-08-19 00:00:00
LibreOffice vulnerabilities
2019-07-17 00:00:00
LibreOffice vulnerabilities
2019-02-06 00:00:00
kaspersky
kaspersky
KLA11542 Multiple vulnerabilities in LibreOffice
2019-08-15 00:00:00
KLA11407 ACE vulnerability in LibreOffice
2019-02-01 00:00:00
KLA11519 Multiple vulnerabilities in LibreOffice
2019-07-16 00:00:00
exploitpack
exploitpack
LibreOffice 6.2.6 Macro - Python Code Execution (Metasploit)
2019-08-21 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: libreoffice-6.2.6.2-1.fc30
2019-08-18 00:56:11
[SECURITY] Fedora 29 Update: libreoffice-6.1.6.3-3.fc29
2019-08-25 03:03:59
[SECURITY] Fedora 29 Update: libreoffice-6.1.6.3-4.fc29
2019-09-16 02:21:27
debian
debian
[SECURITY] [DLA 1947-1] libreoffice security update
2019-10-06 11:31:38
[SECURITY] [DSA 4381-1] libreoffice security update
2019-02-02 18:24:32
[SECURITY] [DLA 1669-1] libreoffice security update
2019-02-08 21:29:11
packetstorm
packetstorm
LibreOffice Macro Python Code Execution
2019-08-20 00:00:00
LibreOffice Macro Code Execution
2019-04-17 00:00:00
zdt
zdt
LibreOffice < 6.2.6 Macro - Python Code Execution Exploit
2019-08-21 00:00:00
LibreOffice 6.0.7 / 6.1.3 - Macro Code Execution Exploit
2019-04-18 00:00:00
exploitdb
exploitdb
LibreOffice &lt; 6.2.6 Macro - Python Code Execution (Metasploit)
2019-08-21 00:00:00
LibreOffice &lt; 6.0.7 / 6.1.3 - Macro Code Execution (Metasploit)
2019-04-18 00:00:00
mageia
mageia
Updated libreoffice packages fix security vulnerabilities
2019-11-30 16:06:06
Updated libreoffice packages fix security vulnerability
2019-02-22 04:08:50
alpinelinux
alpinelinux
CVE-2019-9851
2019-08-15 22:15:22
CVE-2019-9852
2019-08-15 22:15:22
CVE-2019-9850
2019-08-15 22:15:22
nvd
nvd
CVE-2019-9852
2019-08-15 22:15:22
CVE-2019-9851
2019-08-15 22:15:22
CVE-2019-9850
2019-08-15 22:15:22
osv
osv
libreoffice - security update
2019-10-05 00:00:00
libreoffice - security update
2019-08-15 00:00:00
CVE-2019-9851
2019-08-15 22:15:22
redhatcve
redhatcve
CVE-2019-9850
2019-08-23 04:21:45
CVE-2019-9852
2019-08-23 04:52:13
CVE-2019-9851
2019-08-23 04:52:50
ubuntucve
ubuntucve
CVE-2019-9850
2019-08-15 00:00:00
CVE-2019-9851
2019-08-15 00:00:00
CVE-2019-9852
2019-08-15 00:00:00
prion
prion
Input validation
2019-08-15 22:15:00
Design/Logic Flaw
2019-08-15 22:15:00
Directory traversal
2019-08-15 22:15:00
debiancve
debiancve
CVE-2019-9850
2019-08-15 22:15:22
CVE-2019-9852
2019-08-15 22:15:22
CVE-2019-9851
2019-08-15 22:15:22
cvelist
cvelist
CVE-2019-9852 Insufficient URL encoding flaw in allowed script location check
2019-08-15 00:00:00
CVE-2019-9851 LibreLogo global-event script execution
2019-08-15 00:00:00
CVE-2019-9850 Insufficient url validation allowing LibreLogo script execution
2019-08-15 00:00:00
oraclelinux
oraclelinux
libreoffice security and bug fix update
2020-04-06 00:00:00
libreoffice security and bug fix update
2020-05-05 00:00:00
libreoffice security and bug fix update
2019-08-13 00:00:00
redhat
redhat
(RHSA-2020:1151) Moderate: libreoffice security and bug fix update
2020-03-31 09:25:19
(RHSA-2020:1598) Moderate: libreoffice security and bug fix update
2020-04-28 08:55:11
(RHSA-2019:2130) Low: libreoffice security and bug fix update
2019-08-06 08:04:23
centos
centos
autocorr, libreoffice, libreofficekit security update
2020-04-08 18:36:06
autocorr, libreoffice, libreofficekit security update
2019-08-30 03:27:17
cve
cve
CVE-2019-9851
2019-08-15 22:15:22
CVE-2019-9850
2019-08-15 22:15:22
CVE-2019-9852
2019-08-15 22:15:22
malwarebytes
malwarebytes
New critical vulnerability discovered in open-source office suites
2019-02-06 17:16:50
veracode
veracode
Denial Of Service
2020-04-01 00:38:31
Arbitrary Code Execution
2020-04-01 00:38:31
Arbitrary Code Execution
2020-04-01 00:38:30
attackerkb
attackerkb
LibreOffice Macro Code Execution
2019-03-25 00:00:00
CVE-2019-9848
2019-07-17 00:00:00
checkpoint_advisories
checkpoint_advisories
LibreOffice and Openoffice Remote Code Execution (CVE-2018-16858)
2019-02-04 00:00:00
LibreOffice Remote Code Execution (CVE-2019-9848)
2020-02-26 00:00:00
gentoo
gentoo
LibreOffice: Multiple vulnerabilities
2019-08-15 00:00:00
archlinux
archlinux
[ASA-201908-9] libreoffice-still: multiple issues
2019-08-16 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

0.971 High

EPSS

Percentile

99.8%

JSON
Related for DEBIAN:DSA-4501-1:7A4C9
nessus45thn3openvas31metasploit2suse3ubuntu3kaspersky3exploitpack1fedora6debian5packetstorm2zdt2exploitdb2mageia2alpinelinux5nvd6osv11redhatcve6ubuntucve6prion6debiancve6cvelist6oraclelinux3redhat3centos2cve6malwarebytes1veracode5attackerkb2checkpoint_advisories2gentoo1archlinux1