PT-2019-6306 · Libreoffice+3 · Unoconv+3

Brett Buerhaus + 6 · Published 2019-09-16 · Updated 2020-10-20 · CVE-2019-17400

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions unoconv versions prior to 0.9

Description The issue is related to insufficient validation of incoming requests in the LibreOffice Unoconv document format converter. This allows a remote attacker to access confidential data. The vulnerability is also associated with the mishandling of untrusted pathnames, leading to Server-Side Request Forgery (SSRF) and local file inclusion.

Recommendations For versions prior to 0.9, update to version 0.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the unoconv package to minimize the risk of exploitation. Avoid using untrusted pathnames in the affected package until the issue is resolved.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2023-00196

CESA-2020_3944

CVE-2019-17400

GHSA-27P5-7CW6-M45H

PYSEC-2019-213

RHSA-2020:3944

RHSA-2020_3944

Affected Products

Astra Linux

Centos

Red Hat

Unoconv

References · 20

• 🔥 https://buer.haus/2019/10/18/a-tale-of-exploitation-in-spreadsheet-file-conversions · Exploit
• https://github.com/unoconv/unoconv/pull/510 · Patch
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1221SE17MD · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-27p5-7cw6-m45h · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-3944.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-17400 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-17400 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-17400 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-17400 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0131SE47MD · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00196 · Security Note
• https://osv.dev/vulnerability/PYSEC-2019-213 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-17400 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-17400 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-17400 · Vendor Advisory