USN-3883-1

See a problem?

Source

https://ubuntu.com/security/notices/USN-3883-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3883-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-3883-1

Related

Published

2019-02-06T14:21:58.975091Z

Modified

2019-02-06T14:21:58.975091Z

Summary

libreoffice vulnerabilities

Details

It was discovered that LibreOffice incorrectly handled certain document files. If a user were tricked into opening a specially crafted document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code. (CVE-2018-10119, CVE-2018-10120, CVE-2018-11790)

It was discovered that LibreOffice incorrectly handled embedded SMB connections in document files. If a user were tricked in to opening a specially crafted document, a remote attacker could possibly exploit this to obtain sensitive information. (CVE-2018-10583)

Alex Inführ discovered that LibreOffice incorrectly handled embedded scripts in document files. If a user were tricked into opening a specially crafted document, a remote attacker could possibly execute arbitrary code. (CVE-2018-16858)

References

Affected packages

Ubuntu:14.04:LTS / libreoffice

Package

Name: libreoffice
Purl: pkg:deb/ubuntu/libreoffice@1:4.2.8-0ubuntu5.5?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:4.2.8-0ubuntu5.5

Affected versions

1:4.*

1:4.1.2~rc3-0ubuntu1

1:4.1.2~rc3-0ubuntu2

1:4.1.3-0ubuntu2

1:4.1.3-0ubuntu3

1:4.2.0~rc4-0ubuntu1

1:4.2.0-0ubuntu1

1:4.2.1-0ubuntu1

1:4.2.3~rc2-0ubuntu1

1:4.2.3~rc3-0ubuntu1

1:4.2.3~rc3-0ubuntu2

1:4.2.4-0ubuntu2

1:4.2.6.3-0ubuntu1

1:4.2.7-0ubuntu1

1:4.2.7-0ubuntu2

1:4.2.8-0ubuntu2

1:4.2.8-0ubuntu3

1:4.2.8-0ubuntu4

1:4.2.8-0ubuntu5

1:4.2.8-0ubuntu5.1

1:4.2.8-0ubuntu5.2

1:4.2.8-0ubuntu5.3

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "libreoffice-core": "1:4.2.8-0ubuntu5.5",
            "libreoffice-java-common": "1:4.2.8-0ubuntu5.5",
            "libreoffice-gtk-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-style-crystal": "1:4.2.8-0ubuntu5.5",
            "libreoffice-kde-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-style-galaxy": "1:4.2.8-0ubuntu5.5",
            "libreoffice-gnome": "1:4.2.8-0ubuntu5.5",
            "libreoffice-math-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-pdfimport-dbgsym": "1:4.2.8-0ubuntu5.5",
            "browser-plugin-libreoffice": "1:4.2.8-0ubuntu5.5",
            "libreoffice-sdbc-postgresql-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-sdbc-postgresql": "1:4.2.8-0ubuntu5.5",
            "libreoffice-avmedia-backend-gstreamer-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-style-tango": "1:4.2.8-0ubuntu5.5",
            "libreoffice-ogltrans": "1:4.2.8-0ubuntu5.5",
            "libreoffice-base-drivers": "1:4.2.8-0ubuntu5.5",
            "libreoffice-dev": "1:4.2.8-0ubuntu5.5",
            "libreoffice-base-drivers-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-style-sifr": "1:4.2.8-0ubuntu5.5",
            "ure": "4.2.8-0ubuntu5.5",
            "browser-plugin-libreoffice-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-dev-doc": "1:4.2.8-0ubuntu5.5",
            "libreoffice-gtk": "1:4.2.8-0ubuntu5.5",
            "libreoffice-writer": "1:4.2.8-0ubuntu5.5",
            "libreoffice-sdbc-hsqldb-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-emailmerge": "1:4.2.8-0ubuntu5.5",
            "libreoffice-gnome-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-librelogo": "1:4.2.8-0ubuntu5.5",
            "libreoffice-pdfimport": "1:4.2.8-0ubuntu5.5",
            "libreoffice-report-builder-bin": "1:4.2.8-0ubuntu5.5",
            "libreoffice-subsequentcheckbase": "1:4.2.8-0ubuntu5.5",
            "uno-libs3-dbg": "4.2.8-0ubuntu5.5",
            "libreoffice-base": "1:4.2.8-0ubuntu5.5",
            "fonts-opensymbol": "2:102.6+LibO4.2.8-0ubuntu5.5",
            "libreoffice-calc-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-sdbc-hsqldb": "1:4.2.8-0ubuntu5.5",
            "libreoffice-gtk3": "1:4.2.8-0ubuntu5.5",
            "libreoffice-style-oxygen": "1:4.2.8-0ubuntu5.5",
            "libreoffice-gtk3-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-l10n-ku": "1:4.2.8-0ubuntu5.5",
            "libreoffice-style-human": "1:4.2.8-0ubuntu5.5",
            "libreoffice-base-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice": "1:4.2.8-0ubuntu5.5",
            "libreoffice-sdbc-firebird": "1:4.2.8-0ubuntu5.5",
            "libreoffice-common": "1:4.2.8-0ubuntu5.5",
            "libreoffice-base-core": "1:4.2.8-0ubuntu5.5",
            "libreoffice-wiki-publisher": "1.1.2+LibO4.2.8-0ubuntu5.5",
            "libreoffice-presentation-minimizer": "1:4.2.8-0ubuntu5.5",
            "libreoffice-l10n-za": "1:4.2.8-0ubuntu5.5",
            "libreoffice-report-builder": "1:4.2.8-0ubuntu5.5",
            "libreoffice-l10n-in": "1:4.2.8-0ubuntu5.5",
            "python3-uno-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-kde": "1:4.2.8-0ubuntu5.5",
            "libreoffice-calc": "1:4.2.8-0ubuntu5.5",
            "libreoffice-writer-dbgsym": "1:4.2.8-0ubuntu5.5",
            "python3-uno": "1:4.2.8-0ubuntu5.5",
            "libreoffice-script-provider-js": "1:4.2.8-0ubuntu5.5",
            "libreoffice-avmedia-backend-gstreamer": "1:4.2.8-0ubuntu5.5",
            "ure-dbg": "4.2.8-0ubuntu5.5",
            "libreoffice-base-core-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-dev-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-ogltrans-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-core-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-script-provider-bsh": "1:4.2.8-0ubuntu5.5",
            "libreoffice-mysql-connector": "1.0.2+LibO4.2.8-0ubuntu5.5",
            "libreoffice-presenter-console": "1:4.2.8-0ubuntu5.5",
            "uno-libs3": "4.2.8-0ubuntu5.5",
            "openoffice.org-dtd-officedocument1.0": "2:1.0+LibO4.2.8-0ubuntu5.5",
            "libreoffice-dbg": "1:4.2.8-0ubuntu5.5",
            "libreoffice-officebean": "1:4.2.8-0ubuntu5.5",
            "libreoffice-draw": "1:4.2.8-0ubuntu5.5",
            "libreoffice-impress-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-script-provider-python": "1:4.2.8-0ubuntu5.5",
            "ure-dbgsym": "4.2.8-0ubuntu5.5",
            "libreoffice-officebean-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-style-hicontrast": "1:4.2.8-0ubuntu5.5",
            "libreoffice-report-builder-bin-dbgsym": "1:4.2.8-0ubuntu5.5",
            "libreoffice-math": "1:4.2.8-0ubuntu5.5",
            "libreoffice-mysql-connector-dbgsym": "1.0.2+LibO4.2.8-0ubuntu5.5",
            "libreoffice-impress": "1:4.2.8-0ubuntu5.5",
            "libreoffice-draw-dbgsym": "1:4.2.8-0ubuntu5.5",
            "uno-libs3-dbgsym": "4.2.8-0ubuntu5.5"
        }
    ]
}

Ubuntu:16.04:LTS / libreoffice

Package

Name: libreoffice
Purl: pkg:deb/ubuntu/libreoffice@1:5.1.6~rc2-0ubuntu1~xenial6?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:5.1.6~rc2-0ubuntu1~xenial6

Affected versions

1:5.*

1:5.0.2-0ubuntu1

1:5.0.2-0ubuntu2

1:5.0.2-0ubuntu5

1:5.0.2-0ubuntu7

1:5.0.2-0ubuntu8

1:5.1.0~rc3-0ubuntu2

1:5.1.0-0ubuntu1

1:5.1.1~rc2-0ubuntu1

1:5.1.1-0ubuntu1

1:5.1.1-0ubuntu3

1:5.1.2-0ubuntu1

1:5.1.3-0ubuntu1

1:5.1.4-0ubuntu1

1:5.1.6~rc2-0ubuntu1~xenial1

1:5.1.6~rc2-0ubuntu1~xenial2

1:5.1.6~rc2-0ubuntu1~xenial3

1:5.1.6~rc2-0ubuntu1~xenial4

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "gir1.2-lokdocview-0.1": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-java-common": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-gtk-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-core": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-style-breeze": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-kde-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-style-galaxy": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-gnome": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-math-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-pdfimport-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-sdbc-postgresql-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-sdbc-postgresql": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-avmedia-backend-gstreamer-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-style-tango": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-ogltrans": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-base-drivers": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-dev": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreofficekit-dev": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-style-sifr": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "ure": "5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-base-drivers-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-dev-doc": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-gtk": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-writer": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-sdbc-hsqldb-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-report-builder-bin": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-gnome-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-style-elementary": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-pdfimport": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-librelogo": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-subsequentcheckbase": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "uno-libs3-dbg": "5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-base": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "fonts-opensymbol": "2:102.7+LibO5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-calc-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-sdbc-hsqldb": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-gtk3": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-style-oxygen": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-gtk3-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-style-human": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-base-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "gir1.2-lokdocview-0.1-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-sdbc-firebird": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-common": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-base-core": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-wiki-publisher": "1.2.0+LibO5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-l10n-za": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-report-builder": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-l10n-in": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-kde": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-calc": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-writer-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "python3-uno": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-script-provider-js": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-avmedia-backend-gstreamer": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "ure-dbg": "5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-base-core-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-dev-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-ogltrans-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-core-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-script-provider-bsh": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-mysql-connector": "1.0.2+LibO5.1.6~rc2-0ubuntu1~xenial6",
            "uno-libs3": "5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-dbg": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-officebean": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-sdbc-firebird-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-script-provider-python": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-impress-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-draw": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "ure-dbgsym": "5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-officebean-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-style-hicontrast": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-report-builder-bin-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-math": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-mysql-connector-dbgsym": "1.0.2+LibO5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-impress": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "libreoffice-draw-dbgsym": "1:5.1.6~rc2-0ubuntu1~xenial6",
            "uno-libs3-dbgsym": "5.1.6~rc2-0ubuntu1~xenial6"
        }
    ]
}