Lucene search
Veracode Vulnerability DatabaseVERACODE:21125HistoryAug 08, 2019 - 12:07 a.m.
Directory Traversal
2019-08-0800:07:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.963 High
EPSS
Percentile
99.6%
LibreOffice is vulnerable to directory traversal. Arbitrary python functions in arbitrary modules on the filesystem can be executed without warning.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libreoffice | eq | 5.3.6.1__19.el7 | |
| libreoffice | eq | 5.3.6.1__19.el7 |
References
packetstormsecurity.com/files/152560/LibreOffice-Macro-Code-Execution.html
www.rapid7.com/db/modules/exploit/multi/fileformat/libreoffice_macro_exec
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
access.redhat.com/errata/RHSA-2019:2130
access.redhat.com/security/updates/classification/#low
bugzilla.redhat.com/show_bug.cgi?id=1066844
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16858
www.exploit-db.com/exploits/46727/
www.libreoffice.org/about-us/security/advisories/cve-2018-16858/
Related
thn
thn
Severe RCE Flaw Disclosed in Popular LibreOffice and OpenOffice Software
2019-02-05 11:11:00
Patches for 2 Severe LibreOffice Flaws Bypassed — Update to Patch Again
2019-08-16 09:19:00
malwarebytes
malwarebytes
New critical vulnerability discovered in open-source office suites
2019-02-06 17:16:50
redhat
redhat
(RHSA-2019:2130) Low: libreoffice security and bug fix update
2019-08-06 08:04:23
nessus
nessus
SUSE SLED15 / SLES15 Security Update : libreoffice (SUSE-SU-2019:2003-1)
2019-08-12 00:00:00
CentOS 7 : libreoffice (CESA-2019:2130)
2019-08-30 00:00:00
openSUSE Security Update : LibreOffice (openSUSE-2019-1929)
2019-08-20 00:00:00
debiancve
debiancve
CVE-2018-16858
2019-03-25 18:29:00
CVE-2019-9852
2019-08-15 22:15:22
metasploit
metasploit
LibreOffice Macro Code Execution
2019-04-12 19:01:29
LibreOffice Macro Python Code Execution
2019-07-30 21:07:20
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2019:1894-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2019-0102)
2022-01-28 00:00:00
LibreOffice RCE Vulnerability (Feb 2019) - Mac OS X
2019-02-07 00:00:00
cve
cve
CVE-2018-16858
2019-03-25 18:29:00
CVE-2019-9852
2019-08-15 22:15:22
suse
suse
Security update for LibreOffice (moderate)
2019-08-18 00:00:00
ubuntucve
ubuntucve
CVE-2018-16858
2019-02-04 00:00:00
CVE-2019-9852
2019-08-15 00:00:00
centos
centos
autocorr, libreoffice, libreofficekit security update
2019-08-30 03:27:17
osv
osv
libreoffice - security update
2019-02-08 00:00:00
CVE-2018-16858
2019-03-25 18:29:00
libreoffice - security update
2019-02-02 00:00:00
prion
prion
Directory traversal
2019-03-25 18:29:00
Directory traversal
2019-08-15 22:15:00
redhatcve
redhatcve
CVE-2018-16858
2019-02-03 03:49:24
CVE-2019-9852
2019-08-23 04:52:13
nvd
nvd
CVE-2018-16858
2019-03-25 18:29:00
CVE-2019-9852
2019-08-15 22:15:22
cvelist
cvelist
CVE-2018-16858
2019-03-25 17:43:08
debian
debian
[SECURITY] [DSA 4381-1] libreoffice security update
2019-02-02 18:24:32
[SECURITY] [DLA 1669-1] libreoffice security update
2019-02-08 21:29:11
[SECURITY] [DSA 4501-1] libreoffice security update
2019-08-15 20:05:33
kaspersky
kaspersky
KLA11407 ACE vulnerability in LibreOffice
2019-02-01 00:00:00
packetstorm
packetstorm
LibreOffice Macro Code Execution
2019-04-17 00:00:00
LibreOffice Macro Python Code Execution
2019-08-20 00:00:00
oraclelinux
oraclelinux
libreoffice security and bug fix update
2019-08-13 00:00:00
attackerkb
attackerkb
LibreOffice Macro Code Execution
2019-03-25 00:00:00
checkpoint_advisories
checkpoint_advisories
LibreOffice and Openoffice Remote Code Execution (CVE-2018-16858)
2019-02-04 00:00:00
mageia
mageia
Updated libreoffice packages fix security vulnerability
2019-02-22 04:08:50
Updated libreoffice packages fix security vulnerabilities
2019-11-30 16:06:06
zdt
zdt
LibreOffice 6.0.7 / 6.1.3 - Macro Code Execution Exploit
2019-04-18 00:00:00
LibreOffice < 6.2.6 Macro - Python Code Execution Exploit
2019-08-21 00:00:00
exploitdb
exploitdb
LibreOffice < 6.0.7 / 6.1.3 - Macro Code Execution (Metasploit)
2019-04-18 00:00:00
LibreOffice < 6.2.6 Macro - Python Code Execution (Metasploit)
2019-08-21 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: libreoffice-6.0.7.3-1.fc28
2019-02-08 02:31:05
alpinelinux
alpinelinux
CVE-2019-9852
2019-08-15 22:15:22
exploitpack
exploitpack
LibreOffice 6.2.6 Macro - Python Code Execution (Metasploit)
2019-08-21 00:00:00
ubuntu
ubuntu
LibreOffice vulnerabilities
2019-02-06 00:00:00