PT-2018-2471 · Document Foundation+5 · Libreoffice+5

Andrew Krasichkov + 2 · Publicado 2018-02-09 · Atualizado 2019-10-03 · CVE-2018-6871

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibreOffice versions prior to 5.4.5 LibreOffice versions 6.x prior to 6.0.1

Description The issue is related to the COM.MICROSOFT.WEBSERVICE function in LibreOffice, which allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document. This is due to inadequate management of registration data. An attacker can exploit this issue by sending a specially crafted request to gain access to protected information.

Recommendations For versions prior to 5.4.5, update to version 5.4.5 or later. For versions 6.x prior to 6.0.1, update to version 6.0.1 or later. As a temporary workaround, consider disabling the COM.MICROSOFT.WEBSERVICE function until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

ALT-PU-2018-1273

BDU:2019-00714

CESA-2018_0418

CESA-2018_0517

CVE-2018-6871

DSA-4111-1

DSA-4111-2

MGASA-2018-0271

OPENSUSE-SU-2018_0446-1

RHSA-2018:0418

RHSA-2018:0517

RHSA-2018_0418

RHSA-2018_0517

SUSE-SU-2018:0428-1

SUSE-SU-2018:0443-1

SUSE-SU-2018:1076-1

SUSE-SU-2018_0428-1

SUSE-SU-2018_0443-1

USN-3579-1

Produtos afetados

Alt Linux

Centos

Libreoffice

Red Hat

Suse

Ubuntu

Referências · 76

• 🔥 https://github.com/jollheef/libreoffice-remote-arbitrary-file-disclosure · Exploit
• 🔥 https://exploit-db.com/exploits/44022 · Exploit
• https://security-tracker.debian.org/tracker/DSA-4111-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-9432 · Nota
• https://libreoffice.org/about-us/security/advisories/cve-2018-10120 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10119 · Nota de Segurança
• https://bugzilla.suse.com/1042829 · Nota
• https://lists.centos.org/pipermail/centos-announce/2018-March/034808.html · Nota
• https://lists.centos.org/pipermail/centos-announce/2018-March/084964.html · Nota
• https://libreoffice.org/about-us/security/advisories/cve-2018-10119 · Nota
• https://debian.org/security/2018/dsa-4178 · Aviso do Fabricante
• https://bugzilla.suse.com/1083213 · Nota
• https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 · Nota
• https://blog.documentfoundation.org/blog/2018/02/09/early-availability-libreoffice-5-4-5-libreoffice-6-0-1 · Nota
• https://bugzilla.suse.com/1080249 · Nota