PT-2021-4369 · Document Foundation+6 · Libreoffice+6

Published 2021-10-11 · Updated 2025-03-21 · CVE-2021-25635

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions LibreOffice (affected versions not specified)

Description The issue is related to errors in cryptographic signature verification. It may allow a remote attacker to conduct spoofing attacks. The flaw leads to LibreOffice presenting a valid signature when the validity of the signature was not verified, posing a threat to confidentiality and integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Verification of Cryptographic Signature

Improper Certificate Validation

Weakness Enumeration

CWE-347

CWE-295

Related Identifiers

ALSA-2022:1766

ALT-PU-2021-3043

ALT-PU-2021-3077

BDU:2021-04999

CESA-2022_1766

CVE-2021-25635

MGASA-2021-0471

RHSA-2022:1766

RHSA-2022_1766

RLSA-2022:1766

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Libreoffice

Red Hat

Rocky Linux

References · 34

• https://cve.org/CVERecord?id=CVE-2021-25635 · Security Note
• https://osv.dev/vulnerability/MGASA-2021-0471 · Vendor Advisory
• https://libreoffice.org/about-us/security/advisories/cve-2021-25635 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:1766 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0471.html · Security Note
• https://ubuntu.com/security/CVE-2021-25635 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1766 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-25635 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2022-1766.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-1766.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:1766 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-25635 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25635 · Security Note
• https://bdu.fstec.ru/vul/2021-04999 · Security Note
• https://openwall.com/lists/oss-security/2021/10/11/3 · Note