Critical severity9.8NVD Advisory· Published Feb 9, 2018· Updated Jun 17, 2026

CVE-2018-6871

Description

LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Libreoffice/Libreofficellm-fuzzy
Range: <5.4.5 || >=6.0.0 <6.0.1
osv-coords35 versions
pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/boost&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/gnome-documents&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/gnome-documents&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libepubgen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libepubgen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libepubgen&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libixion&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libixion&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libixion&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libmwaw&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libmwaw&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libmwaw&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/liborcus&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/liborcus&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/liborcus&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libqxp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libqxp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libqxp&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP2 pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libstaroffice&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libstaroffice&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libwps&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libwps&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libwps&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/myspell-dictionaries&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/myspell-dictionaries&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3
< 1.54.0-26.3.1+ 34 more
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 1.54.0-26.3.1
- (no CPE)range: < 3.20.1-10.6.3
- (no CPE)range: < 3.20.1-10.6.3
- (no CPE)range: < 0.1.0-6.6.1
- (no CPE)range: < 0.1.0-6.6.1
- (no CPE)range: < 0.1.0-6.6.1
- (no CPE)range: < 0.13.0-13.6.1
- (no CPE)range: < 0.13.0-13.6.1
- (no CPE)range: < 0.13.0-13.6.1
- (no CPE)range: < 0.3.13-7.9.1
- (no CPE)range: < 0.3.13-7.9.1
- (no CPE)range: < 0.3.13-7.9.1
- (no CPE)range: < 0.13.4-10.9.1
- (no CPE)range: < 0.13.4-10.9.1
- (no CPE)range: < 0.13.4-10.9.1
- (no CPE)range: < 0.0.1-1.3.1
- (no CPE)range: < 0.0.1-1.3.1
- (no CPE)range: < 0.0.1-1.3.1
- (no CPE)range: < 5.4.5.1-40.24.1
- (no CPE)range: < 5.4.5.1-43.19.1
- (no CPE)range: < 5.4.5.1-40.24.1
- (no CPE)range: < 5.4.5.1-43.19.1
- (no CPE)range: < 5.4.5.1-40.24.1
- (no CPE)range: < 5.4.5.1-43.19.1
- (no CPE)range: < 0.0.5-7.1
- (no CPE)range: < 0.0.5-7.1
- (no CPE)range: < 0.4.7-10.7.1
- (no CPE)range: < 0.4.7-10.7.1
- (no CPE)range: < 0.4.7-10.7.1
- (no CPE)range: < 20180403-16.9.1
- (no CPE)range: < 20180403-16.9.1

Patches

Vulnerability mechanics

References

cgit.freedesktop.org/libreoffice/core/commit/nvdPatchThird Party Advisory
www.exploit-db.com/exploits/44022/nvdExploitThird Party AdvisoryVDB Entry
access.redhat.com/errata/RHSA-2018:0418nvdThird Party Advisory
access.redhat.com/errata/RHSA-2018:0517nvdThird Party Advisory
usn.ubuntu.com/3579-1/nvdThird Party Advisory
www.debian.org/security/2018/dsa-4111nvdThird Party Advisory
www.libreoffice.org/about-us/security/advisories/cve-2018-1055/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.019
exploit	0.030
kev	0.000
patch	-0.070
ransomware	0.000