critical
CVE-2017-8358
libreoffice: heap-based buffer overflow related to the ReadJPEG function
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.0CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (medium).
Description
LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Red Hat | autocorr-af, autocorr-bg, autocorr-ca and 187 more | no fix listed |
Show all 190 entries from 1 source
| Source | Package | Fixed in |
|---|---|---|
| Red Hat | autocorr-af | no fix listed |
| Red Hat | autocorr-bg | no fix listed |
| Red Hat | autocorr-ca | no fix listed |
| Red Hat | autocorr-cs | no fix listed |
| Red Hat | autocorr-da | no fix listed |
| Red Hat | autocorr-de | no fix listed |
| Red Hat | autocorr-en | no fix listed |
| Red Hat | autocorr-es | no fix listed |
| Red Hat | autocorr-eu | no fix listed |
| Red Hat | autocorr-fa | no fix listed |
| Red Hat | autocorr-fi | no fix listed |
| Red Hat | autocorr-fr | no fix listed |
| Red Hat | autocorr-ga | no fix listed |
| Red Hat | autocorr-hr | no fix listed |
| Red Hat | autocorr-hu | no fix listed |
| Red Hat | autocorr-is | no fix listed |
| Red Hat | autocorr-it | no fix listed |
| Red Hat | autocorr-ja | no fix listed |
| Red Hat | autocorr-ko | no fix listed |
| Red Hat | autocorr-lb | no fix listed |
| Red Hat | autocorr-lt | no fix listed |
| Red Hat | autocorr-mn | no fix listed |
| Red Hat | autocorr-nl | no fix listed |
| Red Hat | autocorr-pl | no fix listed |
| Red Hat | autocorr-pt | no fix listed |
| Red Hat | autocorr-ro | no fix listed |
| Red Hat | autocorr-ru | no fix listed |
| Red Hat | autocorr-sk | no fix listed |
| Red Hat | autocorr-sl | no fix listed |
| Red Hat | autocorr-sr | no fix listed |
| Red Hat | autocorr-sv | no fix listed |
| Red Hat | autocorr-tr | no fix listed |
| Red Hat | autocorr-vi | no fix listed |
| Red Hat | autocorr-zh | no fix listed |
| Red Hat | libreoffice | no fix listed |
| Red Hat | libreoffice-base | no fix listed |
| Red Hat | libreoffice-bsh | no fix listed |
| Red Hat | libreoffice-calc | no fix listed |
| Red Hat | libreoffice-core | no fix listed |
| Red Hat | libreoffice-data | no fix listed |
| Red Hat | libreoffice-draw | no fix listed |
| Red Hat | libreoffice-emailmerge | no fix listed |
| Red Hat | libreoffice-filters | no fix listed |
| Red Hat | libreoffice-gdb-debug-support | no fix listed |
| Red Hat | libreoffice-glade | no fix listed |
| Red Hat | libreoffice-graphicfilter | no fix listed |
| Red Hat | libreoffice-gtk2 | no fix listed |
| Red Hat | libreoffice-gtk3 | no fix listed |
| Red Hat | libreoffice-headless | no fix listed |
| Red Hat | libreoffice-help-ar | no fix listed |
| Red Hat | libreoffice-help-bg | no fix listed |
| Red Hat | libreoffice-help-bn | no fix listed |
| Red Hat | libreoffice-help-ca | no fix listed |
| Red Hat | libreoffice-help-cs | no fix listed |
| Red Hat | libreoffice-help-da | no fix listed |
| Red Hat | libreoffice-help-de | no fix listed |
| Red Hat | libreoffice-help-dz | no fix listed |
| Red Hat | libreoffice-help-el | no fix listed |
| Red Hat | libreoffice-help-es | no fix listed |
| Red Hat | libreoffice-help-et | no fix listed |
| Red Hat | libreoffice-help-eu | no fix listed |
| Red Hat | libreoffice-help-fi | no fix listed |
| Red Hat | libreoffice-help-fr | no fix listed |
| Red Hat | libreoffice-help-gl | no fix listed |
| Red Hat | libreoffice-help-gu | no fix listed |
| Red Hat | libreoffice-help-he | no fix listed |
| Red Hat | libreoffice-help-hi | no fix listed |
| Red Hat | libreoffice-help-hr | no fix listed |
| Red Hat | libreoffice-help-hu | no fix listed |
| Red Hat | libreoffice-help-id | no fix listed |
| Red Hat | libreoffice-help-it | no fix listed |
| Red Hat | libreoffice-help-ja | no fix listed |
| Red Hat | libreoffice-help-ko | no fix listed |
| Red Hat | libreoffice-help-lt | no fix listed |
| Red Hat | libreoffice-help-lv | no fix listed |
| Red Hat | libreoffice-help-nb | no fix listed |
| Red Hat | libreoffice-help-nl | no fix listed |
| Red Hat | libreoffice-help-nn | no fix listed |
| Red Hat | libreoffice-help-pl | no fix listed |
| Red Hat | libreoffice-help-pt-BR | no fix listed |
| Red Hat | libreoffice-help-pt-PT | no fix listed |
| Red Hat | libreoffice-help-ro | no fix listed |
| Red Hat | libreoffice-help-ru | no fix listed |
| Red Hat | libreoffice-help-si | no fix listed |
| Red Hat | libreoffice-help-sk | no fix listed |
| Red Hat | libreoffice-help-sl | no fix listed |
| Red Hat | libreoffice-help-sv | no fix listed |
| Red Hat | libreoffice-help-ta | no fix listed |
| Red Hat | libreoffice-help-tr | no fix listed |
| Red Hat | libreoffice-help-uk | no fix listed |
| Red Hat | libreoffice-help-zh-Hans | no fix listed |
| Red Hat | libreoffice-help-zh-Hant | no fix listed |
| Red Hat | libreoffice-impress | no fix listed |
| Red Hat | libreoffice-javafilter | no fix listed |
| Red Hat | libreoffice-langpack-af | no fix listed |
| Red Hat | libreoffice-langpack-ar | no fix listed |
| Red Hat | libreoffice-langpack-as | no fix listed |
| Red Hat | libreoffice-langpack-bg | no fix listed |
| Red Hat | libreoffice-langpack-bn | no fix listed |
| Red Hat | libreoffice-langpack-br | no fix listed |
| Red Hat | libreoffice-langpack-ca | no fix listed |
| Red Hat | libreoffice-langpack-cs | no fix listed |
| Red Hat | libreoffice-langpack-cy | no fix listed |
| Red Hat | libreoffice-langpack-da | no fix listed |
| Red Hat | libreoffice-langpack-de | no fix listed |
| Red Hat | libreoffice-langpack-dz | no fix listed |
| Red Hat | libreoffice-langpack-el | no fix listed |
| Red Hat | libreoffice-langpack-en | no fix listed |
| Red Hat | libreoffice-langpack-es | no fix listed |
| Red Hat | libreoffice-langpack-et | no fix listed |
| Red Hat | libreoffice-langpack-eu | no fix listed |
| Red Hat | libreoffice-langpack-fa | no fix listed |
| Red Hat | libreoffice-langpack-fi | no fix listed |
| Red Hat | libreoffice-langpack-fr | no fix listed |
| Red Hat | libreoffice-langpack-ga | no fix listed |
| Red Hat | libreoffice-langpack-gl | no fix listed |
| Red Hat | libreoffice-langpack-gu | no fix listed |
| Red Hat | libreoffice-langpack-he | no fix listed |
| Red Hat | libreoffice-langpack-hi | no fix listed |
| Red Hat | libreoffice-langpack-hr | no fix listed |
| Red Hat | libreoffice-langpack-hu | no fix listed |
| Red Hat | libreoffice-langpack-id | no fix listed |
| Red Hat | libreoffice-langpack-it | no fix listed |
| Red Hat | libreoffice-langpack-ja | no fix listed |
| Red Hat | libreoffice-langpack-kk | no fix listed |
| Red Hat | libreoffice-langpack-kn | no fix listed |
| Red Hat | libreoffice-langpack-ko | no fix listed |
| Red Hat | libreoffice-langpack-lt | no fix listed |
| Red Hat | libreoffice-langpack-lv | no fix listed |
| Red Hat | libreoffice-langpack-mai | no fix listed |
| Red Hat | libreoffice-langpack-ml | no fix listed |
| Red Hat | libreoffice-langpack-mr | no fix listed |
| Red Hat | libreoffice-langpack-ms | no fix listed |
| Red Hat | libreoffice-langpack-nb | no fix listed |
| Red Hat | libreoffice-langpack-nl | no fix listed |
| Red Hat | libreoffice-langpack-nn | no fix listed |
| Red Hat | libreoffice-langpack-nr | no fix listed |
| Red Hat | libreoffice-langpack-nso | no fix listed |
| Red Hat | libreoffice-langpack-or | no fix listed |
| Red Hat | libreoffice-langpack-pa | no fix listed |
| Red Hat | libreoffice-langpack-pl | no fix listed |
| Red Hat | libreoffice-langpack-pt-BR | no fix listed |
| Red Hat | libreoffice-langpack-pt-PT | no fix listed |
| Red Hat | libreoffice-langpack-ro | no fix listed |
| Red Hat | libreoffice-langpack-ru | no fix listed |
| Red Hat | libreoffice-langpack-si | no fix listed |
| Red Hat | libreoffice-langpack-sk | no fix listed |
| Red Hat | libreoffice-langpack-sl | no fix listed |
| Red Hat | libreoffice-langpack-sr | no fix listed |
| Red Hat | libreoffice-langpack-ss | no fix listed |
| Red Hat | libreoffice-langpack-st | no fix listed |
| Red Hat | libreoffice-langpack-sv | no fix listed |
| Red Hat | libreoffice-langpack-ta | no fix listed |
| Red Hat | libreoffice-langpack-te | no fix listed |
| Red Hat | libreoffice-langpack-th | no fix listed |
| Red Hat | libreoffice-langpack-tn | no fix listed |
| Red Hat | libreoffice-langpack-tr | no fix listed |
| Red Hat | libreoffice-langpack-ts | no fix listed |
| Red Hat | libreoffice-langpack-uk | no fix listed |
| Red Hat | libreoffice-langpack-ur | no fix listed |
| Red Hat | libreoffice-langpack-ve | no fix listed |
| Red Hat | libreoffice-langpack-xh | no fix listed |
| Red Hat | libreoffice-langpack-zh-Hans | no fix listed |
| Red Hat | libreoffice-langpack-zh-Hant | no fix listed |
| Red Hat | libreoffice-langpack-zu | no fix listed |
| Red Hat | libreoffice-librelogo | no fix listed |
| Red Hat | libreoffice-math | no fix listed |
| Red Hat | libreoffice-nlpsolver | no fix listed |
| Red Hat | libreoffice-officebean | no fix listed |
| Red Hat | libreoffice-officebean-common | no fix listed |
| Red Hat | libreoffice-ogltrans | no fix listed |
| Red Hat | libreoffice-opensymbol-fonts | no fix listed |
| Red Hat | libreoffice-pdfimport | no fix listed |
| Red Hat | libreoffice-postgresql | no fix listed |
| Red Hat | libreoffice-presentation-minimizer | no fix listed |
| Red Hat | libreoffice-presenter-screen | no fix listed |
| Red Hat | libreoffice-pyuno | no fix listed |
| Red Hat | libreoffice-report-builder | no fix listed |
| Red Hat | libreoffice-rhino | no fix listed |
| Red Hat | libreoffice-sdk | no fix listed |
| Red Hat | libreoffice-sdk-doc | no fix listed |
| Red Hat | libreoffice-testtools | no fix listed |
| Red Hat | libreoffice-ure | no fix listed |
| Red Hat | libreoffice-ure-common | no fix listed |
| Red Hat | libreoffice-wiki-publisher | no fix listed |
| Red Hat | libreoffice-writer | no fix listed |
| Red Hat | libreoffice-x11 | no fix listed |
| Red Hat | libreoffice-xsltfilter | no fix listed |
| Red Hat | libreofficekit | no fix listed |
| Red Hat | libreofficekit-devel | no fix listed |
References
- http://www.securityfocus.com/bid/98395
- https://access.redhat.com/security/cve/CVE-2017-8358
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=889
- https://github.com/LibreOffice/core/commit/6e6e54f944a5ebb49e9110bdeff844d00a96c56c
- https://nvd.nist.gov/vuln/detail/CVE-2017-8358
- https://www.cve.org/CVERecord?id=CVE-2017-8358