PT-2021-16804 · Onlyoffice · Onlyoffice Document Server

Published 2021-03-01 · Updated 2021-10-29 · CVE-2021-25829

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ONLYOFFICE DocumentServer versions 4.0.0 through 5.6.3

Description An improper binary stream data handling issue was found in the [core] module. This issue allows an attacker to produce a denial of service attack that can eventually shut down the target server.

Recommendations For versions 4.0.0 through 5.6.3, consider temporarily disabling the [core] module to prevent exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2021-25829

Affected Products

Onlyoffice Document Server

References · 15

• 🔥 https://github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25829 · Exploit
• https://github.com/ONLYOFFICE/core · Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/Core.h#L161 · Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/v5.6.4.10/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L1722 · Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/Theme.h#L277 · Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/NotesMaster.h#L148 · Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/Comments.h#L299 · Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/Presentation.h#L277 · Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/NotesSlide.h#L141 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-25829 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25829 · Security Note
• https://github.com/ONLYOFFICE/DocumentServer · Note
• https://t.me/cibsecurity/24295 · Telegram Post
• https://t.me/cvenotify/10704 · Telegram Post
• https://t.me/cybersecuritytechnologies/4625 · Telegram Post