5.0
Medium
CVE-2023-1183 A flaw was found in the Libreoffice package
Description
A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libreoffice 7.5 | earliest → < 7.5.1 | 7.5.1 |
| libreoffice 7.4 | earliest → < 7.4.6 | 7.4.6 |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Fedora | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2208506 bugzilla.redhat.com
- www.libreoffice.org www.libreoffice.org
- www.openwall.com www.openwall.com
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified