critical
CVE-2018-16858
libreoffice: Arbitrary python functions in arbitrary modules on the filesystem can be executed without warning
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (medium), Ubuntu (medium), Oracle (low).
Description
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| debian 11 | libreoffice | 1:6.1.3-1 |
| debian 12 | libreoffice | 1:6.1.3-1 |
| debian 13 | libreoffice | 1:6.1.3-1 |
| debian 14 | libreoffice | 1:6.1.3-1 |
| debian 8 | libreoffice | 1:4.3.3-2+deb8u12 |
| debian 9 | libreoffice | 1:5.2.7-1+deb9u5 |
| echo | libreoffice | 1:6.1.3-1 |
| Oracle Linux 7 | autocorr-af, autocorr-bg, autocorr-ca and 178 more | 1:5.3.6.1-21.0.1.el7 |
| Red Hat | autocorr-af, autocorr-bg, autocorr-ca and 129 more | no fix listed |
| ubuntu 14.04 | libreoffice | 1:4.2.8-0ubuntu5.5 |
| ubuntu 16.04 | libreoffice | 1:5.1.6~rc2-0ubuntu1~xenial6 |
Show all 322 entries from 11 sources
| Source | Package | Fixed in |
|---|---|---|
| debian 11 | libreoffice | 1:6.1.3-1 |
| debian 12 | libreoffice | 1:6.1.3-1 |
| debian 13 | libreoffice | 1:6.1.3-1 |
| debian 14 | libreoffice | 1:6.1.3-1 |
| debian 8 | libreoffice | 1:4.3.3-2+deb8u12 |
| debian 9 | libreoffice | 1:5.2.7-1+deb9u5 |
| echo | libreoffice | 1:6.1.3-1 |
| Oracle Linux 7 | autocorr-af | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-bg | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-ca | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-cs | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-da | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-de | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-en | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-es | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-fa | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-fi | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-fr | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-ga | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-hr | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-hu | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-is | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-it | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-ja | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-ko | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-lb | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-lt | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-mn | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-nl | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-pl | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-pt | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-ro | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-ru | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-sk | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-sl | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-sr | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-sv | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-tr | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-vi | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | autocorr-zh | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-base | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-bsh | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-calc | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-core | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-data | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-draw | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-emailmerge | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-filters | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-gdb-debug-support | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-glade | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-graphicfilter | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-gtk2 | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-gtk3 | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-ar | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-bg | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-bn | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-ca | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-cs | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-da | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-de | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-dz | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-el | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-es | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-et | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-eu | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-fi | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-fr | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-gl | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-gu | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-he | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-hi | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-hr | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-hu | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-id | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-it | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-ja | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-ko | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-lt | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-lv | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-nb | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-nl | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-nn | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-pl | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-pt-BR | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-pt-PT | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-ro | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-ru | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-si | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-sk | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-sl | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-sv | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-ta | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-tr | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-uk | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-zh-Hans | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-help-zh-Hant | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-impress | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-af | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-ar | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-as | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-bg | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-bn | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-br | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-ca | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-cs | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-cy | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-da | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-de | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-dz | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-el | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-en | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-es | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-et | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-eu | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-fa | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-fi | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-fr | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-ga | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-gl | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-gu | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-he | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-hi | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-hr | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-hu | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-id | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-it | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-ja | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-kk | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-kn | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-ko | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-lt | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-lv | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-mai | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-ml | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-mr | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-nb | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-nl | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-nn | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-nr | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-nso | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-or | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-pa | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-pl | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-pt-BR | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-pt-PT | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-ro | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-ru | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-si | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-sk | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-sl | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-sr | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-ss | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-st | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-sv | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-ta | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-te | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-th | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-tn | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-tr | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-ts | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-uk | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-ve | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-xh | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-zh-Hans | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-zh-Hant | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-langpack-zu | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-librelogo | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-math | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-nlpsolver | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-officebean | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-officebean-common | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-ogltrans | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-opensymbol-fonts | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-pdfimport | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-postgresql | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-pyuno | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-rhino | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-sdk | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-sdk-doc | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-ure | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-ure-common | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-wiki-publisher | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-writer | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-x11 | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreoffice-xsltfilter | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreofficekit | 1:5.3.6.1-21.0.1.el7 |
| Oracle Linux 7 | libreofficekit-devel | 1:5.3.6.1-21.0.1.el7 |
| Red Hat | autocorr-af | no fix listed |
| Red Hat | autocorr-bg | no fix listed |
| Red Hat | autocorr-ca | no fix listed |
| Red Hat | autocorr-cs | no fix listed |
| Red Hat | autocorr-da | no fix listed |
| Red Hat | autocorr-de | no fix listed |
| Red Hat | autocorr-en | no fix listed |
| Red Hat | autocorr-es | no fix listed |
| Red Hat | autocorr-eu | no fix listed |
| Red Hat | autocorr-fa | no fix listed |
| Red Hat | autocorr-fi | no fix listed |
| Red Hat | autocorr-fr | no fix listed |
| Red Hat | autocorr-ga | no fix listed |
| Red Hat | autocorr-hr | no fix listed |
| Red Hat | autocorr-hu | no fix listed |
| Red Hat | autocorr-is | no fix listed |
| Red Hat | autocorr-it | no fix listed |
| Red Hat | autocorr-ja | no fix listed |
| Red Hat | autocorr-ko | no fix listed |
| Red Hat | autocorr-lb | no fix listed |
| Red Hat | autocorr-lt | no fix listed |
| Red Hat | autocorr-mn | no fix listed |
| Red Hat | autocorr-nl | no fix listed |
| Red Hat | autocorr-pl | no fix listed |
| Red Hat | autocorr-pt | no fix listed |
| Red Hat | autocorr-ro | no fix listed |
| Red Hat | autocorr-ru | no fix listed |
| Red Hat | autocorr-sk | no fix listed |
| Red Hat | autocorr-sl | no fix listed |
| Red Hat | autocorr-sr | no fix listed |
| Red Hat | autocorr-sv | no fix listed |
| Red Hat | autocorr-tr | no fix listed |
| Red Hat | autocorr-vi | no fix listed |
| Red Hat | autocorr-zh | no fix listed |
| Red Hat | libreoffice | no fix listed |
| Red Hat | libreoffice-base | no fix listed |
| Red Hat | libreoffice-bsh | no fix listed |
| Red Hat | libreoffice-calc | no fix listed |
| Red Hat | libreoffice-core | no fix listed |
| Red Hat | libreoffice-draw | no fix listed |
| Red Hat | libreoffice-emailmerge | no fix listed |
| Red Hat | libreoffice-filters | no fix listed |
| Red Hat | libreoffice-gdb-debug-support | no fix listed |
| Red Hat | libreoffice-glade | no fix listed |
| Red Hat | libreoffice-graphicfilter | no fix listed |
| Red Hat | libreoffice-headless | no fix listed |
| Red Hat | libreoffice-impress | no fix listed |
| Red Hat | libreoffice-javafilter | no fix listed |
| Red Hat | libreoffice-langpack-af | no fix listed |
| Red Hat | libreoffice-langpack-ar | no fix listed |
| Red Hat | libreoffice-langpack-as | no fix listed |
| Red Hat | libreoffice-langpack-bg | no fix listed |
| Red Hat | libreoffice-langpack-bn | no fix listed |
| Red Hat | libreoffice-langpack-ca | no fix listed |
| Red Hat | libreoffice-langpack-cs | no fix listed |
| Red Hat | libreoffice-langpack-cy | no fix listed |
| Red Hat | libreoffice-langpack-da | no fix listed |
| Red Hat | libreoffice-langpack-de | no fix listed |
| Red Hat | libreoffice-langpack-dz | no fix listed |
| Red Hat | libreoffice-langpack-el | no fix listed |
| Red Hat | libreoffice-langpack-en | no fix listed |
| Red Hat | libreoffice-langpack-es | no fix listed |
| Red Hat | libreoffice-langpack-et | no fix listed |
| Red Hat | libreoffice-langpack-eu | no fix listed |
| Red Hat | libreoffice-langpack-fi | no fix listed |
| Red Hat | libreoffice-langpack-fr | no fix listed |
| Red Hat | libreoffice-langpack-ga | no fix listed |
| Red Hat | libreoffice-langpack-gl | no fix listed |
| Red Hat | libreoffice-langpack-gu | no fix listed |
| Red Hat | libreoffice-langpack-he | no fix listed |
| Red Hat | libreoffice-langpack-hi | no fix listed |
| Red Hat | libreoffice-langpack-hr | no fix listed |
| Red Hat | libreoffice-langpack-hu | no fix listed |
| Red Hat | libreoffice-langpack-it | no fix listed |
| Red Hat | libreoffice-langpack-ja | no fix listed |
| Red Hat | libreoffice-langpack-kn | no fix listed |
| Red Hat | libreoffice-langpack-ko | no fix listed |
| Red Hat | libreoffice-langpack-lt | no fix listed |
| Red Hat | libreoffice-langpack-mai | no fix listed |
| Red Hat | libreoffice-langpack-ml | no fix listed |
| Red Hat | libreoffice-langpack-mr | no fix listed |
| Red Hat | libreoffice-langpack-ms | no fix listed |
| Red Hat | libreoffice-langpack-nb | no fix listed |
| Red Hat | libreoffice-langpack-nl | no fix listed |
| Red Hat | libreoffice-langpack-nn | no fix listed |
| Red Hat | libreoffice-langpack-nr | no fix listed |
| Red Hat | libreoffice-langpack-nso | no fix listed |
| Red Hat | libreoffice-langpack-or | no fix listed |
| Red Hat | libreoffice-langpack-pa | no fix listed |
| Red Hat | libreoffice-langpack-pl | no fix listed |
| Red Hat | libreoffice-langpack-pt-BR | no fix listed |
| Red Hat | libreoffice-langpack-pt-PT | no fix listed |
| Red Hat | libreoffice-langpack-ro | no fix listed |
| Red Hat | libreoffice-langpack-ru | no fix listed |
| Red Hat | libreoffice-langpack-sk | no fix listed |
| Red Hat | libreoffice-langpack-sl | no fix listed |
| Red Hat | libreoffice-langpack-sr | no fix listed |
| Red Hat | libreoffice-langpack-ss | no fix listed |
| Red Hat | libreoffice-langpack-st | no fix listed |
| Red Hat | libreoffice-langpack-sv | no fix listed |
| Red Hat | libreoffice-langpack-ta | no fix listed |
| Red Hat | libreoffice-langpack-te | no fix listed |
| Red Hat | libreoffice-langpack-th | no fix listed |
| Red Hat | libreoffice-langpack-tn | no fix listed |
| Red Hat | libreoffice-langpack-tr | no fix listed |
| Red Hat | libreoffice-langpack-ts | no fix listed |
| Red Hat | libreoffice-langpack-uk | no fix listed |
| Red Hat | libreoffice-langpack-ur | no fix listed |
| Red Hat | libreoffice-langpack-ve | no fix listed |
| Red Hat | libreoffice-langpack-xh | no fix listed |
| Red Hat | libreoffice-langpack-zh-Hans | no fix listed |
| Red Hat | libreoffice-langpack-zh-Hant | no fix listed |
| Red Hat | libreoffice-langpack-zu | no fix listed |
| Red Hat | libreoffice-librelogo | no fix listed |
| Red Hat | libreoffice-math | no fix listed |
| Red Hat | libreoffice-nlpsolver | no fix listed |
| Red Hat | libreoffice-officebean | no fix listed |
| Red Hat | libreoffice-ogltrans | no fix listed |
| Red Hat | libreoffice-opensymbol-fonts | no fix listed |
| Red Hat | libreoffice-pdfimport | no fix listed |
| Red Hat | libreoffice-presentation-minimizer | no fix listed |
| Red Hat | libreoffice-presenter-screen | no fix listed |
| Red Hat | libreoffice-pyuno | no fix listed |
| Red Hat | libreoffice-report-builder | no fix listed |
| Red Hat | libreoffice-rhino | no fix listed |
| Red Hat | libreoffice-sdk | no fix listed |
| Red Hat | libreoffice-sdk-doc | no fix listed |
| Red Hat | libreoffice-testtools | no fix listed |
| Red Hat | libreoffice-ure | no fix listed |
| Red Hat | libreoffice-wiki-publisher | no fix listed |
| Red Hat | libreoffice-writer | no fix listed |
| Red Hat | libreoffice-xsltfilter | no fix listed |
| ubuntu 14.04 | libreoffice | 1:4.2.8-0ubuntu5.5 |
| ubuntu 16.04 | libreoffice | 1:5.1.6~rc2-0ubuntu1~xenial6 |
References
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00059.html
- http://packetstormsecurity.com/files/152560/LibreOffice-Macro-Code-Execution.html
- http://www.rapid7.com/db/modules/exploit/multi/fileformat/libreoffice_macro_exec
- https://access.redhat.com/errata/RHSA-2019:2130
- https://access.redhat.com/security/cve/CVE-2018-16858
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16858
- https://insert-script.blogspot.com/2019/02/libreoffice-cve-2018-16858-remote-code.html
- https://linux.oracle.com/cve/CVE-2018-16858.html
All 15 references
- https://linux.oracle.com/errata/ELSA-2019-2130.html
- https://nvd.nist.gov/vuln/detail/CVE-2018-16858
- https://seclists.org/bugtraq/2019/Aug/28
- https://ubuntu.com/security/notices/USN-3883-1
- https://www.cve.org/CVERecord?id=CVE-2018-16858
- https://www.exploit-db.com/exploits/46727/
- https://www.libreoffice.org/about-us/security/advisories/cve-2018-16858/