Unrated severityNVD Advisory· Published Feb 9, 2018· Updated Aug 5, 2024

CVE-2018-6871

Description

LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.

Affected products

osv-coords35 versions
pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/gnome-documents&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/gnome-documents&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libepubgen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libepubgen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libepubgen&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libixion&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libixion&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libixion&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libmwaw&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libmwaw&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libmwaw&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/liborcus&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/liborcus&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/liborcus&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libqxp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libqxp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libqxp&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP2 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libstaroffice&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libstaroffice&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libwps&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libwps&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libwps&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/myspell-dictionaries&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/myspell-dictionaries&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3
< 1.54.0-26.3.1+ 34 more
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 3.20.1-10.6.3
- (no CPE)range: < 3.20.1-10.6.3
- (no CPE)range: < 0.1.0-6.6.1
- (no CPE)range: < 0.1.0-6.6.1
- (no CPE)range: < 0.1.0-6.6.1
- (no CPE)range: < 0.13.0-13.6.1
- (no CPE)range: < 0.13.0-13.6.1
- (no CPE)range: < 0.13.0-13.6.1
- (no CPE)range: < 0.3.13-7.9.1
- (no CPE)range: < 0.3.13-7.9.1
- (no CPE)range: < 0.3.13-7.9.1
- (no CPE)range: < 0.13.4-10.9.1
- (no CPE)range: < 0.13.4-10.9.1
- (no CPE)range: < 0.13.4-10.9.1
- (no CPE)range: < 0.0.1-1.3.1
- (no CPE)range: < 0.0.1-1.3.1
- (no CPE)range: < 0.0.1-1.3.1
- (no CPE)range: < 5.4.5.1-40.24.1
- (no CPE)range: < 5.4.5.1-43.19.1
- (no CPE)range: < 5.4.5.1-40.24.1
- (no CPE)range: < 5.4.5.1-43.19.1
- (no CPE)range: < 5.4.5.1-40.24.1
- (no CPE)range: < 5.4.5.1-43.19.1
- (no CPE)range: < 0.0.5-7.1
- (no CPE)range: < 0.0.5-7.1
- (no CPE)range: < 0.4.7-10.7.1
- (no CPE)range: < 0.4.7-10.7.1
- (no CPE)range: < 0.4.7-10.7.1
- (no CPE)range: < 20180403-16.9.1
- (no CPE)range: < 20180403-16.9.1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.exploit-db.com/exploits/44022/mitreexploitx_refsource_EXPLOIT-DB
access.redhat.com/errata/RHSA-2018:0418mitrevendor-advisoryx_refsource_REDHAT
access.redhat.com/errata/RHSA-2018:0517mitrevendor-advisoryx_refsource_REDHAT
usn.ubuntu.com/3579-1/mitrevendor-advisoryx_refsource_UBUNTU
www.debian.org/security/2018/dsa-4111mitrevendor-advisoryx_refsource_DEBIAN
cgit.freedesktop.org/libreoffice/core/commit/mitrex_refsource_CONFIRM
www.libreoffice.org/about-us/security/advisories/cve-2018-1055/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.024
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000