Critical severity9.8NVD Advisory· Published Feb 9, 2018· Updated Jun 17, 2026

CVE-2018-6871

Description

LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

osv-coords35 versions
pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libmwaw&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/liborcus&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libqxp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libstaroffice&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libixion&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libstaroffice&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libixion&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/libepubgen&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libqxp&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libwps&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP2 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/gnome-documents&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libepubgen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/myspell-dictionaries&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libepubgen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libmwaw&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/liborcus&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libqxp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libwps&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/libixion&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libmwaw&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/liborcus&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/myspell-dictionaries&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/gnome-documents&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libwps&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3
< 5.4.5.1-43.19.1+ 34 more
- (no CPE)range: < 5.4.5.1-43.19.1
- (no CPE)range: < 0.3.13-7.9.1
- (no CPE)range: < 0.13.4-10.9.1
- (no CPE)range: < 0.0.1-1.3.1
- (no CPE)range: < 0.0.5-7.1
- (no CPE)range: < 0.13.0-13.6.1
- (no CPE)range: < 0.0.5-7.1
- (no CPE)range: < 0.13.0-13.6.1
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 0.1.0-6.6.1
- (no CPE)range: < 0.0.1-1.3.1
- (no CPE)range: < 0.4.7-10.7.1
- (no CPE)range: < 5.4.5.1-40.24.1
- (no CPE)range: < 5.4.5.1-40.24.1
- (no CPE)range: < 5.4.5.1-40.24.1
- (no CPE)range: < 5.4.5.1-43.19.1
- (no CPE)range: < 5.4.5.1-43.19.1
- (no CPE)range: < 3.20.1-10.6.3
- (no CPE)range: < 0.1.0-6.6.1
- (no CPE)range: < 20180403-16.9.1
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 0.1.0-6.6.1
- (no CPE)range: < 0.3.13-7.9.1
- (no CPE)range: < 0.13.4-10.9.1
- (no CPE)range: < 0.0.1-1.3.1
- (no CPE)range: < 0.4.7-10.7.1
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 0.13.0-13.6.1
- (no CPE)range: < 0.3.13-7.9.1
- (no CPE)range: < 0.13.4-10.9.1
- (no CPE)range: < 20180403-16.9.1
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 3.20.1-10.6.3
- (no CPE)range: < 0.4.7-10.7.1
Libreoffice/Libreofficellm-fuzzy6 versions
<5.4.5 || >=6.0.0 <6.0.1+ 5 more
- (no CPE)range: <5.4.5 || >=6.0.0 <6.0.1
- cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*range: <5.4.5
- cpe:2.3:a:libreoffice:libreoffice:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:6.0.0:alpha1:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:6.0.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:6.0.0:beta2:*:*:*:*:*:*
Debian/linux
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Canonical/Ubuntu Linux3 versions
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Desktop2 versions
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server2 versions
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Aus2 versions
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Eus3 versions
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Tus2 versions
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Workstation2 versions
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

cgit.freedesktop.org/libreoffice/core/commit/nvdPatchThird Party Advisory
www.exploit-db.com/exploits/44022/nvdExploitThird Party AdvisoryVDB Entry
access.redhat.com/errata/RHSA-2018:0418nvdThird Party Advisory
access.redhat.com/errata/RHSA-2018:0517nvdThird Party Advisory
usn.ubuntu.com/3579-1/nvdThird Party Advisory
www.debian.org/security/2018/dsa-4111nvdThird Party Advisory
www.libreoffice.org/about-us/security/advisories/cve-2018-1055/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.018
exploit	0.030
kev	0.000
patch	-0.070
ransomware	0.000