CVE-2018-10583

2018-05-0100:00:00

ubuntu.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.171 Low

EPSS

Percentile

96.1%

JSON

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and
Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB
connection embedded in a malicious file, as demonstrated by
xlink:href=file://192.168.0.2/test.jpg within an office:document-content
element in a .odt XML document.

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlibreoffice< 1:4.2.8-0ubuntu5.5UNKNOWN
ubuntu16.04noarchlibreoffice< 1:5.1.6~rc2-0ubuntu1~xenial6UNKNOWN