遠端 Oracle Linux 8 主機中安裝的套件受到 ELSA-2023-0089 公告中提及的多個弱點影響。

  - LibreOffice 支援在使用者的組態資料庫中儲存 Web 連線的密碼，
    儲存的密碼使用由使用者提供的單一主要金鑰加密。LibreOffice 中有一個瑕疵，其中主金鑰編碼不當，導致其熵從 128 位元減弱為 43 位元，如果攻擊者有權存取使用者儲存的組態，則可對儲存的密碼執行暴力密碼破解攻擊。此問題會影響：Document Foundation LibreOffice 7.2 版的 7.2.7 之前版本、7.3 版的 7.3.3 之前版本。(CVE-2022-26307)

  - LibreOffice 支援 Office URI 配置，以啟用 LibreOffice 與 MS SharePoint 伺服器的瀏覽器整合。新增 LibreOffice 專屬的其他配置「vnd.libreoffice.command」。在受影響的 LibreOffice 版本中，使用該配置的連結可被建構爲使用任意引數呼叫內部巨集。當按一下連結或由文件事件啟動此連結時，可導致在沒有警告的情況下執行任意指令碼。此問題會影響：Document Foundation LibreOffice 7.4 版的 7.4.1 之前版本、7.3 版的 7.3.6 之前版本。(CVE-2022-3140)

  - LibreOffice 中存在憑證驗證不當弱點，程式僅透過比對所用憑證與受信任憑證的序號和發行者字串來判斷巨集是否由受信任的作者簽署。這不足以驗證此巨集是否確實使用此憑證簽署。因此，攻擊者可使用與受信任憑證相同的序號和發行者字串建立任意憑證，而 LibreOffice 會將此憑證顯示為屬於受信任的作者，這可能導致使用者執行錯誤信任的巨集中包含的任意程式碼。此問題會影響：Document Foundation LibreOffice 7.2 版的 7.2.7 之前版本、7.3 版的 7.3.1 之前版本。(CVE-2022-26305)

  - LibreOffice 支援在使用者的組態資料庫中儲存 Web 連線的密碼，
    儲存的密碼使用由使用者提供的單一主要金鑰加密。LibreOffice 中有一個缺陷，加密所需的初始化向量一律相同，這會削弱加密的安全性，若攻擊者有權存取使用者組態資料，則可對程式發動攻擊。此問題會影響：Document Foundation LibreOffice 7.2 版的 7.2.7 之前版本、7.3 版的 7.3.1 之前版本。(CVE-2022-26306)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Debian 10 主機上安裝的多個套件受到 dla-3368 公告中提及的多個弱點影響。

  - LibreOffice 支援 ODF 文件和文件中的巨集數位簽章，呈現自上次簽署後文件未發生任何變更的視覺輔助工具，且該簽章有效。
    LibreOffice 中存在一個不當驗證憑證弱點，該弱點允許攻擊者透過操控文件中的 documentsignatures.xml 或 macrosignatures.xml 資料流來建立以數位方式簽署的 ODF 文件，進而包含 KeyInfo 標記的 X509Data 和 KeyValue 子項，而這會導致開啟 LibreOffice 時，系統使用 KeyValue 進行驗證，但卻報告使用不相關的 X509Data 值進行的驗證。
    此問題會影響：早於 7.2.5 的 Document Foundation LibreOffice 7.2 版本。(CVE-2021-25636)

  - LibreOffice 中存在憑證驗證不當弱點，程式僅透過比對所用憑證與受信任憑證的序號和發行者字串來判斷巨集是否由受信任的作者簽署。這不足以驗證此巨集是否確實使用此憑證簽署。因此，攻擊者可使用與受信任憑證相同的序號和發行者字串建立任意憑證，而 LibreOffice 會將此憑證顯示為屬於受信任的作者，這可能導致使用者執行錯誤信任的巨集中包含的任意程式碼。此問題會影響：Document Foundation LibreOffice 7.2 版的 7.2.7 之前版本、7.3 版的 7.3.1 之前版本。(CVE-2022-26305)

  - LibreOffice 支援在使用者的組態資料庫中儲存 Web 連線的密碼，
    儲存的密碼使用由使用者提供的單一主要金鑰加密。LibreOffice 中有一個缺陷，加密所需的初始化向量一律相同，這會削弱加密的安全性，若攻擊者有權存取使用者組態資料，則可對程式發動攻擊。此問題會影響：Document Foundation LibreOffice 7.2 版的 7.2.7 之前版本、7.3 版的 7.3.1 之前版本。(CVE-2022-26306)

  - LibreOffice 支援在使用者的組態資料庫中儲存 Web 連線的密碼，
    儲存的密碼使用由使用者提供的單一主要金鑰加密。LibreOffice 中有一個瑕疵，其中主金鑰編碼不當，導致其熵從 128 位元減弱為 43 位元，如果攻擊者有權存取使用者儲存的組態，則可對儲存的密碼執行暴力密碼破解攻擊。此問題會影響：Document Foundation LibreOffice 7.2 版的 7.2.7 之前版本、7.3 版的 7.3.3 之前版本。(CVE-2022-26307)

  - LibreOffice 支援 Office URI 配置，以啟用 LibreOffice 與 MS SharePoint 伺服器的瀏覽器整合。新增 LibreOffice 專屬的其他配置「vnd.libreoffice.command」。在受影響的 LibreOffice 版本中，使用該配置的連結可被建構爲使用任意引數呼叫內部巨集。當按一下連結或由文件事件啟動此連結時，可導致在沒有警告的情況下執行任意指令碼。此問題會影響：Document Foundation LibreOffice 7.4 版的 7.4.1 之前版本、7.3 版的 7.3.6 之前版本。(CVE-2022-3140)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

According to its self-reported version, the LibreOffice application running on the remote host is prior to 7.2.7 or 7.3.3. It is, therefore, affected by multiple vulnerabilities:
  - LibreOffice supports the storage of passwords for web connections in the user's configuration database. The stored     passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where the     required initialization vector for encryption was always the same which weakens the security of the encryption     making them vulnerable if an attacker has access to the user's configuration data.  (CVE-2022-26306)

  - LibreOffice supports the storage of passwords for web connections in the user's configuration database. The stored   passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where the master   key was poorly encoded resulting in weakening its entropy from 128 to 43 bits making the stored passwords vulerable   to a brute force attack if an attacker has access to the users stored config. (CVE-2022-26307)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3368 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3368-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                    Bastien Roucaries     March 26, 2023                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libreoffice     Version        : 1:6.1.5-3+deb10u8     CVE ID         : CVE-2021-25636 CVE-2022-3140 CVE-2022-26305 CVE-2022-26306                      CVE-2022-26307

    Multiple vulnerabilities were found in LibreOffice an     office productivity software suite, leading to arbitrary script     execution, improper certificate validation, and weak encryption     of password storage in the user??s configuration database.

    CVE-2021-25636

        Only use X509Data         LibreOffice supports digital signatures of ODF documents and macros         within documents, presenting visual aids that no alteration of the         document occurred since the last signing and that the signature is         valid. An Improper Certificate Validation vulnerability in LibreOffice         allowed an attacker to create a digitally signed ODF document, by         manipulating the documentsignatures.xml or macrosignatures.xml stream         within the document to contain both X509Data and KeyValue children         of the KeyInfo tag, which when opened caused LibreOffice to verify         using the KeyValue but to report verification with the unrelated         X509Data value.

    CVE-2022-3140

        Insufficient validation of vnd.libreoffice.command         URI schemes. LibreOffice supports Office URI Schemes to enable browser         integration of LibreOffice with MS SharePoint server. An additional         scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In         the affected versions of LibreOffice links using that scheme could be         constructed to call internal macros with arbitrary arguments. Which         when clicked on, or activated by document events, could result in         arbitrary script execution without warning.

    CVE-2022-26305

        Compare authors using Thumbprint         An Improper Certificate Validation vulnerability in LibreOffice         existed where determining if a macro was signed by a trusted author         was done by only matching the serial number and issuer string of the         used certificate with that of a trusted certificate. This is not         sufficient to verify that the macro was actually signed with the         certificate. An adversary could therefore create an arbitrary         certificate with a serial number and an issuer string identical to a         trusted certificate which LibreOffice would present as belonging to         the trusted author, potentially leading to the user to execute         arbitrary code contained in macros improperly trusted.

    CVE-2022-26306

        LibreOffice supports the storage of passwords for         web connections in the user??s configuration database. The stored         passwords are encrypted with a single master key provided by the         user. A flaw in LibreOffice existed where the required initialization         vector for encryption was always the same which weakens the security         of the encryption making them vulnerable if an attacker has access to         the user's configuration data

    CVE-2022-26307

        Add Initialization Vectors to password storage.
        LibreOffice supports the storage of passwords for web connections in         the user??s configuration database. The stored passwords are encrypted         with a single master key provided by the user. A flaw in LibreOffice         existed where master key was poorly encoded resulting in weakening its         entropy from 128 to 43 bits making the stored passwords vulerable to a         brute force attack if an attacker has access to the users stored         config.

    For Debian 10 buster, these problems have been fixed in version     1:6.1.5-3+deb10u8.

    We recommend that you upgrade your libreoffice packages.

    For the detailed security status of libreoffice please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libreoffice

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0089 advisory.

    LibreOffice is an open source, community-developed office productivity suite. It includes key desktop     applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a     drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office     suite.

    Security Fix(es):

    * libreoffice: Macro URL arbitrary script execution (CVE-2022-3140)

    * libreoffice: Execution of Untrusted Macros Due to Improper Certificate Validation (CVE-2022-26305)

    * libreoffice: Static Initialization Vector Allows to Recover Passwords for Web Connections Without     Knowing the Master Password (CVE-2022-26306)

    * libreoffice: Weak Master Keys (CVE-2022-26307)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0089 advisory.

    - Resolves: rhbz#2134752 CVE-2022-26305 Untrusted Macros
    - Resolves: rhbz#2134751 CVE-2022-26307 Weak Master Keys
    - Resolves: rhbz#2134750 CVE-2022-26306 Static Initialization Vector

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0072 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2022-26305:
    An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was     signed by a trusted author was done by only matching the serial number and issuer string of the used     certificate with that of a trusted certificate. This is not sufficient to verify that the macro was     actually signed with the certificate. An adversary could therefore create an arbitrary certificate with a     serial number and an issuer string identical to a trusted certificate which LibreOffice would present as     belonging to the trusted author, potentially leading to the user to execute arbitrary code contained in     macros improperly trusted. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to     7.2.7; 7.3 versions prior to 7.3.1.

    CVE-2022-26306:
    LibreOffice supports the storage of passwords for web connections in the users configuration database.
    The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice     existed where the required initialization vector for encryption was always the same which weakens the     security of the encryption making them vulnerable if an attacker has access to the user's configuration     data. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions     prior to 7.3.1.

    CVE-2022-26307:
    LibreOffice supports the storage of passwords for web connections in the users configuration database.
    The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice     existed where master key was poorly encoded resulting in weakening its entropy from 128 to 43 bits making     the stored passwords vulerable to a brute force attack if an attacker has access to the users stored     config. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions     prior to 7.3.3.

    CVE-2022-3140:
    LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint     server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected     versions of LibreOffice links using that scheme could be constructed to call internal macros with     arbitrary arguments. Which when clicked on, or activated by document events, could result in arbitrary     script execution without warning. This issue affects: The Document Foundation LibreOffice 7.4 versions     prior to 7.4.1; 7.3 versions prior to 7.3.6.

    CVE-2022-38745:
    Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path.
    This may lead to run arbitrary Java code from the current directory.

    CVE-2023-0950:
    Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation     LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow     when loaded. In the affected versions of LibreOffice certain malformed spreadsheet formulas, such as     AGGREGATE, could be created with less parameters passed to the formula interpreter than it expected,     leading to an array index underflow, in which case there is a risk that arbitrary code could be executed.
    This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.6; 7.5 versions prior to     7.5.1.

    CVE-2023-1183:
    A flaw was found in the Libreoffice package. An attacker can craft an odb containing a database/script     file with a SCRIPT command where the contents of the file could be written to a new file whose location     was determined by the attacker.

    CVE-2023-2255:
    Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to     craft a document that would cause external links to be loaded without prompt. In the affected versions of     LibreOffice documents that used floating frames linked to external files, would load the contents of     those frames without prompting the user for permission to do so. This was inconsistent with the treatment     of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4     versions prior to 7.4.7; 7.5 versions prior to 7.5.3.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
170117	Oracle Linux 8：libreoffice (ELSA-2023-0089)	Nessus	Oracle Linux Local Security Checks	1/18/2023	11/2/2024	high
173416	Debian DLA-3368-1：libreoffice - LTS 安全性更新	Nessus	Debian Local Security Checks	3/26/2023	1/22/2025	high
163763	LibreOffice < 7.2.7 / 7.3 < 7.3.3 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	8/3/2022	10/18/2022	high
173416	Debian dla-3368 : fonts-opensymbol - security update	Nessus	Debian Local Security Checks	3/26/2023	1/22/2025	high
169961	RHEL 8 : libreoffice (RHSA-2023:0089)	Nessus	Red Hat Local Security Checks	1/12/2023	11/7/2024	high
170117	Oracle Linux 8 : libreoffice (ELSA-2023-0089)	Nessus	Oracle Linux Local Security Checks	1/18/2023	11/2/2024	high
236157	Alibaba Cloud Linux 3 : 0072: libreoffice (ALINUX3-SA-2024:0072)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high