Anolis OS update for libreoffice



Risk High
Patch available YES
Number of vulnerabilities 4
CVE-ID CVE-2022-38745
CVE-2023-0950
CVE-2023-1183
CVE-2023-2255
CWE-ID CWE-94
CWE-129
CWE-73
CWE-357
Exploitation vector Network
Public exploit N/A
Vulnerable software
Anolis OS
Operating systems & Components / Operating system

libreoffice-ure-common
Operating systems & Components / Operating system package or component

libreoffice-opensymbol-fonts
Operating systems & Components / Operating system package or component

libreoffice-data
Operating systems & Components / Operating system package or component

autocorr-zh
Operating systems & Components / Operating system package or component

autocorr-vi
Operating systems & Components / Operating system package or component

autocorr-tr
Operating systems & Components / Operating system package or component

autocorr-sv
Operating systems & Components / Operating system package or component

autocorr-sr
Operating systems & Components / Operating system package or component

autocorr-sl
Operating systems & Components / Operating system package or component

autocorr-sk
Operating systems & Components / Operating system package or component

autocorr-ru
Operating systems & Components / Operating system package or component

autocorr-ro
Operating systems & Components / Operating system package or component

autocorr-pt
Operating systems & Components / Operating system package or component

autocorr-pl
Operating systems & Components / Operating system package or component

autocorr-nl
Operating systems & Components / Operating system package or component

autocorr-mn
Operating systems & Components / Operating system package or component

autocorr-lt
Operating systems & Components / Operating system package or component

autocorr-lb
Operating systems & Components / Operating system package or component

autocorr-ko
Operating systems & Components / Operating system package or component

autocorr-ja
Operating systems & Components / Operating system package or component

autocorr-it
Operating systems & Components / Operating system package or component

autocorr-is
Operating systems & Components / Operating system package or component

autocorr-hu
Operating systems & Components / Operating system package or component

autocorr-hr
Operating systems & Components / Operating system package or component

autocorr-ga
Operating systems & Components / Operating system package or component

autocorr-fr
Operating systems & Components / Operating system package or component

autocorr-fi
Operating systems & Components / Operating system package or component

autocorr-fa
Operating systems & Components / Operating system package or component

autocorr-es
Operating systems & Components / Operating system package or component

autocorr-en
Operating systems & Components / Operating system package or component

autocorr-el
Operating systems & Components / Operating system package or component

autocorr-de
Operating systems & Components / Operating system package or component

autocorr-da
Operating systems & Components / Operating system package or component

autocorr-cs
Operating systems & Components / Operating system package or component

autocorr-ca
Operating systems & Components / Operating system package or component

autocorr-bg
Operating systems & Components / Operating system package or component

autocorr-af
Operating systems & Components / Operating system package or component

libreofficekit
Operating systems & Components / Operating system package or component

libreoffice-xsltfilter
Operating systems & Components / Operating system package or component

libreoffice-x11
Operating systems & Components / Operating system package or component

libreoffice-wiki-publisher
Operating systems & Components / Operating system package or component

libreoffice-sdk
Operating systems & Components / Operating system package or component

libreoffice-math
Operating systems & Components / Operating system package or component

libreoffice-langpack-zu
Operating systems & Components / Operating system package or component

libreoffice-langpack-zh-Hant
Operating systems & Components / Operating system package or component

libreoffice-langpack-zh-Hans
Operating systems & Components / Operating system package or component

libreoffice-langpack-xh
Operating systems & Components / Operating system package or component

libreoffice-langpack-ve
Operating systems & Components / Operating system package or component

libreoffice-langpack-uk
Operating systems & Components / Operating system package or component

libreoffice-langpack-ts
Operating systems & Components / Operating system package or component

libreoffice-langpack-tr
Operating systems & Components / Operating system package or component

libreoffice-langpack-tn
Operating systems & Components / Operating system package or component

libreoffice-langpack-th
Operating systems & Components / Operating system package or component

libreoffice-langpack-te
Operating systems & Components / Operating system package or component

libreoffice-langpack-ta
Operating systems & Components / Operating system package or component

libreoffice-langpack-sv
Operating systems & Components / Operating system package or component

libreoffice-langpack-st
Operating systems & Components / Operating system package or component

libreoffice-langpack-ss
Operating systems & Components / Operating system package or component

libreoffice-langpack-sr
Operating systems & Components / Operating system package or component

libreoffice-langpack-sl
Operating systems & Components / Operating system package or component

libreoffice-langpack-sk
Operating systems & Components / Operating system package or component

libreoffice-langpack-si
Operating systems & Components / Operating system package or component

libreoffice-langpack-ru
Operating systems & Components / Operating system package or component

libreoffice-langpack-ro
Operating systems & Components / Operating system package or component

libreoffice-langpack-pt-PT
Operating systems & Components / Operating system package or component

libreoffice-langpack-pt-BR
Operating systems & Components / Operating system package or component

libreoffice-langpack-pl
Operating systems & Components / Operating system package or component

libreoffice-langpack-pa
Operating systems & Components / Operating system package or component

libreoffice-langpack-or
Operating systems & Components / Operating system package or component

libreoffice-langpack-nso
Operating systems & Components / Operating system package or component

libreoffice-langpack-nr
Operating systems & Components / Operating system package or component

libreoffice-langpack-nn
Operating systems & Components / Operating system package or component

libreoffice-langpack-nl
Operating systems & Components / Operating system package or component

libreoffice-langpack-nb
Operating systems & Components / Operating system package or component

libreoffice-langpack-mr
Operating systems & Components / Operating system package or component

libreoffice-langpack-ml
Operating systems & Components / Operating system package or component

libreoffice-langpack-mai
Operating systems & Components / Operating system package or component

libreoffice-langpack-lv
Operating systems & Components / Operating system package or component

libreoffice-langpack-lt
Operating systems & Components / Operating system package or component

libreoffice-langpack-ko
Operating systems & Components / Operating system package or component

libreoffice-langpack-kn
Operating systems & Components / Operating system package or component

libreoffice-langpack-kk
Operating systems & Components / Operating system package or component

libreoffice-langpack-ja
Operating systems & Components / Operating system package or component

libreoffice-langpack-it
Operating systems & Components / Operating system package or component

libreoffice-langpack-id
Operating systems & Components / Operating system package or component

libreoffice-langpack-hu
Operating systems & Components / Operating system package or component

libreoffice-langpack-hr
Operating systems & Components / Operating system package or component

libreoffice-langpack-hi
Operating systems & Components / Operating system package or component

libreoffice-langpack-he
Operating systems & Components / Operating system package or component

libreoffice-langpack-gu
Operating systems & Components / Operating system package or component

libreoffice-langpack-gl
Operating systems & Components / Operating system package or component

libreoffice-langpack-ga
Operating systems & Components / Operating system package or component

libreoffice-langpack-fr
Operating systems & Components / Operating system package or component

libreoffice-langpack-fi
Operating systems & Components / Operating system package or component

libreoffice-langpack-fa
Operating systems & Components / Operating system package or component

libreoffice-langpack-eu
Operating systems & Components / Operating system package or component

libreoffice-langpack-et
Operating systems & Components / Operating system package or component

libreoffice-langpack-es
Operating systems & Components / Operating system package or component

libreoffice-langpack-el
Operating systems & Components / Operating system package or component

libreoffice-langpack-dz
Operating systems & Components / Operating system package or component

libreoffice-langpack-de
Operating systems & Components / Operating system package or component

libreoffice-langpack-da
Operating systems & Components / Operating system package or component

libreoffice-langpack-cy
Operating systems & Components / Operating system package or component

libreoffice-langpack-cs
Operating systems & Components / Operating system package or component

libreoffice-langpack-ca
Operating systems & Components / Operating system package or component

libreoffice-langpack-br
Operating systems & Components / Operating system package or component

libreoffice-langpack-bn
Operating systems & Components / Operating system package or component

libreoffice-langpack-bg
Operating systems & Components / Operating system package or component

libreoffice-langpack-as
Operating systems & Components / Operating system package or component

libreoffice-langpack-ar
Operating systems & Components / Operating system package or component

libreoffice-langpack-af
Operating systems & Components / Operating system package or component

libreoffice-help-zh-Hant
Operating systems & Components / Operating system package or component

libreoffice-help-zh-Hans
Operating systems & Components / Operating system package or component

libreoffice-help-uk
Operating systems & Components / Operating system package or component

libreoffice-help-tr
Operating systems & Components / Operating system package or component

libreoffice-help-ta
Operating systems & Components / Operating system package or component

libreoffice-help-sv
Operating systems & Components / Operating system package or component

libreoffice-help-sl
Operating systems & Components / Operating system package or component

libreoffice-help-sk
Operating systems & Components / Operating system package or component

libreoffice-help-si
Operating systems & Components / Operating system package or component

libreoffice-help-ru
Operating systems & Components / Operating system package or component

libreoffice-help-ro
Operating systems & Components / Operating system package or component

libreoffice-help-pt-PT
Operating systems & Components / Operating system package or component

libreoffice-help-pt-BR
Operating systems & Components / Operating system package or component

libreoffice-help-pl
Operating systems & Components / Operating system package or component

libreoffice-help-nn
Operating systems & Components / Operating system package or component

libreoffice-help-nl
Operating systems & Components / Operating system package or component

libreoffice-help-nb
Operating systems & Components / Operating system package or component

libreoffice-help-lv
Operating systems & Components / Operating system package or component

libreoffice-help-lt
Operating systems & Components / Operating system package or component

libreoffice-help-ko
Operating systems & Components / Operating system package or component

libreoffice-help-ja
Operating systems & Components / Operating system package or component

libreoffice-help-it
Operating systems & Components / Operating system package or component

libreoffice-help-id
Operating systems & Components / Operating system package or component

libreoffice-help-hu
Operating systems & Components / Operating system package or component

libreoffice-help-hr
Operating systems & Components / Operating system package or component

libreoffice-help-hi
Operating systems & Components / Operating system package or component

libreoffice-help-he
Operating systems & Components / Operating system package or component

libreoffice-help-gu
Operating systems & Components / Operating system package or component

libreoffice-help-gl
Operating systems & Components / Operating system package or component

libreoffice-help-fr
Operating systems & Components / Operating system package or component

libreoffice-help-fi
Operating systems & Components / Operating system package or component

libreoffice-help-eu
Operating systems & Components / Operating system package or component

libreoffice-help-et
Operating systems & Components / Operating system package or component

libreoffice-help-es
Operating systems & Components / Operating system package or component

libreoffice-help-el
Operating systems & Components / Operating system package or component

libreoffice-help-dz
Operating systems & Components / Operating system package or component

libreoffice-help-de
Operating systems & Components / Operating system package or component

libreoffice-help-da
Operating systems & Components / Operating system package or component

libreoffice-help-cs
Operating systems & Components / Operating system package or component

libreoffice-help-ca
Operating systems & Components / Operating system package or component

libreoffice-help-bn
Operating systems & Components / Operating system package or component

libreoffice-help-bg
Operating systems & Components / Operating system package or component

libreoffice-help-ar
Operating systems & Components / Operating system package or component

libreoffice-gtk3
Operating systems & Components / Operating system package or component

libreoffice-gdb-debug-support
Operating systems & Components / Operating system package or component

libreoffice-filters
Operating systems & Components / Operating system package or component

libreoffice-emailmerge
Operating systems & Components / Operating system package or component

libreoffice-draw
Operating systems & Components / Operating system package or component

libreoffice-base
Operating systems & Components / Operating system package or component

libreoffice-writer
Operating systems & Components / Operating system package or component

libreoffice-ure
Operating systems & Components / Operating system package or component

libreoffice-sdk-doc
Operating systems & Components / Operating system package or component

libreoffice-pyuno
Operating systems & Components / Operating system package or component

libreoffice-pdfimport
Operating systems & Components / Operating system package or component

libreoffice-ogltrans
Operating systems & Components / Operating system package or component

libreoffice-langpack-en
Operating systems & Components / Operating system package or component

libreoffice-impress
Operating systems & Components / Operating system package or component

libreoffice-help-en
Operating systems & Components / Operating system package or component

libreoffice-graphicfilter
Operating systems & Components / Operating system package or component

libreoffice-core
Operating systems & Components / Operating system package or component

libreoffice-calc
Operating systems & Components / Operating system package or component

Vendor OpenAnolis

Security Bulletin

This security bulletin contains information about 4 vulnerabilities.

1) Code Injection

EUVDB-ID: #VU74031

Risk: High

CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2022-38745

CWE-ID: CWE-94 - Improper Control of Generation of Code ('Code Injection')

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation. A remote attacker can trick the victim to open a specially crafted file and execute arbitrary Java code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

libreoffice-ure-common: before 7.1.8.1-11.0.1

libreoffice-opensymbol-fonts: before 7.1.8.1-11.0.1

libreoffice-data: before 7.1.8.1-11.0.1

autocorr-zh: before 7.1.8.1-11.0.1

autocorr-vi: before 7.1.8.1-11.0.1

autocorr-tr: before 7.1.8.1-11.0.1

autocorr-sv: before 7.1.8.1-11.0.1

autocorr-sr: before 7.1.8.1-11.0.1

autocorr-sl: before 7.1.8.1-11.0.1

autocorr-sk: before 7.1.8.1-11.0.1

autocorr-ru: before 7.1.8.1-11.0.1

autocorr-ro: before 7.1.8.1-11.0.1

autocorr-pt: before 7.1.8.1-11.0.1

autocorr-pl: before 7.1.8.1-11.0.1

autocorr-nl: before 7.1.8.1-11.0.1

autocorr-mn: before 7.1.8.1-11.0.1

autocorr-lt: before 7.1.8.1-11.0.1

autocorr-lb: before 7.1.8.1-11.0.1

autocorr-ko: before 7.1.8.1-11.0.1

autocorr-ja: before 7.1.8.1-11.0.1

autocorr-it: before 7.1.8.1-11.0.1

autocorr-is: before 7.1.8.1-11.0.1

autocorr-hu: before 7.1.8.1-11.0.1

autocorr-hr: before 7.1.8.1-11.0.1

autocorr-ga: before 7.1.8.1-11.0.1

autocorr-fr: before 7.1.8.1-11.0.1

autocorr-fi: before 7.1.8.1-11.0.1

autocorr-fa: before 7.1.8.1-11.0.1

autocorr-es: before 7.1.8.1-11.0.1

autocorr-en: before 7.1.8.1-11.0.1

autocorr-el: before 7.1.8.1-11.0.1

autocorr-de: before 7.1.8.1-11.0.1

autocorr-da: before 7.1.8.1-11.0.1

autocorr-cs: before 7.1.8.1-11.0.1

autocorr-ca: before 7.1.8.1-11.0.1

autocorr-bg: before 7.1.8.1-11.0.1

autocorr-af: before 7.1.8.1-11.0.1

libreofficekit: before 7.1.8.1-11.0.1

libreoffice-xsltfilter: before 7.1.8.1-11.0.1

libreoffice-x11: before 7.1.8.1-11.0.1

libreoffice-wiki-publisher: before 7.1.8.1-11.0.1

libreoffice-sdk: before 7.1.8.1-11.0.1

libreoffice-math: before 7.1.8.1-11.0.1

libreoffice-langpack-zu: before 7.1.8.1-11.0.1

libreoffice-langpack-zh-Hant: before 7.1.8.1-11.0.1

libreoffice-langpack-zh-Hans: before 7.1.8.1-11.0.1

libreoffice-langpack-xh: before 7.1.8.1-11.0.1

libreoffice-langpack-ve: before 7.1.8.1-11.0.1

libreoffice-langpack-uk: before 7.1.8.1-11.0.1

libreoffice-langpack-ts: before 7.1.8.1-11.0.1

libreoffice-langpack-tr: before 7.1.8.1-11.0.1

libreoffice-langpack-tn: before 7.1.8.1-11.0.1

libreoffice-langpack-th: before 7.1.8.1-11.0.1

libreoffice-langpack-te: before 7.1.8.1-11.0.1

libreoffice-langpack-ta: before 7.1.8.1-11.0.1

libreoffice-langpack-sv: before 7.1.8.1-11.0.1

libreoffice-langpack-st: before 7.1.8.1-11.0.1

libreoffice-langpack-ss: before 7.1.8.1-11.0.1

libreoffice-langpack-sr: before 7.1.8.1-11.0.1

libreoffice-langpack-sl: before 7.1.8.1-11.0.1

libreoffice-langpack-sk: before 7.1.8.1-11.0.1

libreoffice-langpack-si: before 7.1.8.1-11.0.1

libreoffice-langpack-ru: before 7.1.8.1-11.0.1

libreoffice-langpack-ro: before 7.1.8.1-11.0.1

libreoffice-langpack-pt-PT: before 7.1.8.1-11.0.1

libreoffice-langpack-pt-BR: before 7.1.8.1-11.0.1

libreoffice-langpack-pl: before 7.1.8.1-11.0.1

libreoffice-langpack-pa: before 7.1.8.1-11.0.1

libreoffice-langpack-or: before 7.1.8.1-11.0.1

libreoffice-langpack-nso: before 7.1.8.1-11.0.1

libreoffice-langpack-nr: before 7.1.8.1-11.0.1

libreoffice-langpack-nn: before 7.1.8.1-11.0.1

libreoffice-langpack-nl: before 7.1.8.1-11.0.1

libreoffice-langpack-nb: before 7.1.8.1-11.0.1

libreoffice-langpack-mr: before 7.1.8.1-11.0.1

libreoffice-langpack-ml: before 7.1.8.1-11.0.1

libreoffice-langpack-mai: before 7.1.8.1-11.0.1

libreoffice-langpack-lv: before 7.1.8.1-11.0.1

libreoffice-langpack-lt: before 7.1.8.1-11.0.1

libreoffice-langpack-ko: before 7.1.8.1-11.0.1

libreoffice-langpack-kn: before 7.1.8.1-11.0.1

libreoffice-langpack-kk: before 7.1.8.1-11.0.1

libreoffice-langpack-ja: before 7.1.8.1-11.0.1

libreoffice-langpack-it: before 7.1.8.1-11.0.1

libreoffice-langpack-id: before 7.1.8.1-11.0.1

libreoffice-langpack-hu: before 7.1.8.1-11.0.1

libreoffice-langpack-hr: before 7.1.8.1-11.0.1

libreoffice-langpack-hi: before 7.1.8.1-11.0.1

libreoffice-langpack-he: before 7.1.8.1-11.0.1

libreoffice-langpack-gu: before 7.1.8.1-11.0.1

libreoffice-langpack-gl: before 7.1.8.1-11.0.1

libreoffice-langpack-ga: before 7.1.8.1-11.0.1

libreoffice-langpack-fr: before 7.1.8.1-11.0.1

libreoffice-langpack-fi: before 7.1.8.1-11.0.1

libreoffice-langpack-fa: before 7.1.8.1-11.0.1

libreoffice-langpack-eu: before 7.1.8.1-11.0.1

libreoffice-langpack-et: before 7.1.8.1-11.0.1

libreoffice-langpack-es: before 7.1.8.1-11.0.1

libreoffice-langpack-el: before 7.1.8.1-11.0.1

libreoffice-langpack-dz: before 7.1.8.1-11.0.1

libreoffice-langpack-de: before 7.1.8.1-11.0.1

libreoffice-langpack-da: before 7.1.8.1-11.0.1

libreoffice-langpack-cy: before 7.1.8.1-11.0.1

libreoffice-langpack-cs: before 7.1.8.1-11.0.1

libreoffice-langpack-ca: before 7.1.8.1-11.0.1

libreoffice-langpack-br: before 7.1.8.1-11.0.1

libreoffice-langpack-bn: before 7.1.8.1-11.0.1

libreoffice-langpack-bg: before 7.1.8.1-11.0.1

libreoffice-langpack-as: before 7.1.8.1-11.0.1

libreoffice-langpack-ar: before 7.1.8.1-11.0.1

libreoffice-langpack-af: before 7.1.8.1-11.0.1

libreoffice-help-zh-Hant: before 7.1.8.1-11.0.1

libreoffice-help-zh-Hans: before 7.1.8.1-11.0.1

libreoffice-help-uk: before 7.1.8.1-11.0.1

libreoffice-help-tr: before 7.1.8.1-11.0.1

libreoffice-help-ta: before 7.1.8.1-11.0.1

libreoffice-help-sv: before 7.1.8.1-11.0.1

libreoffice-help-sl: before 7.1.8.1-11.0.1

libreoffice-help-sk: before 7.1.8.1-11.0.1

libreoffice-help-si: before 7.1.8.1-11.0.1

libreoffice-help-ru: before 7.1.8.1-11.0.1

libreoffice-help-ro: before 7.1.8.1-11.0.1

libreoffice-help-pt-PT: before 7.1.8.1-11.0.1

libreoffice-help-pt-BR: before 7.1.8.1-11.0.1

libreoffice-help-pl: before 7.1.8.1-11.0.1

libreoffice-help-nn: before 7.1.8.1-11.0.1

libreoffice-help-nl: before 7.1.8.1-11.0.1

libreoffice-help-nb: before 7.1.8.1-11.0.1

libreoffice-help-lv: before 7.1.8.1-11.0.1

libreoffice-help-lt: before 7.1.8.1-11.0.1

libreoffice-help-ko: before 7.1.8.1-11.0.1

libreoffice-help-ja: before 7.1.8.1-11.0.1

libreoffice-help-it: before 7.1.8.1-11.0.1

libreoffice-help-id: before 7.1.8.1-11.0.1

libreoffice-help-hu: before 7.1.8.1-11.0.1

libreoffice-help-hr: before 7.1.8.1-11.0.1

libreoffice-help-hi: before 7.1.8.1-11.0.1

libreoffice-help-he: before 7.1.8.1-11.0.1

libreoffice-help-gu: before 7.1.8.1-11.0.1

libreoffice-help-gl: before 7.1.8.1-11.0.1

libreoffice-help-fr: before 7.1.8.1-11.0.1

libreoffice-help-fi: before 7.1.8.1-11.0.1

libreoffice-help-eu: before 7.1.8.1-11.0.1

libreoffice-help-et: before 7.1.8.1-11.0.1

libreoffice-help-es: before 7.1.8.1-11.0.1

libreoffice-help-el: before 7.1.8.1-11.0.1

libreoffice-help-dz: before 7.1.8.1-11.0.1

libreoffice-help-de: before 7.1.8.1-11.0.1

libreoffice-help-da: before 7.1.8.1-11.0.1

libreoffice-help-cs: before 7.1.8.1-11.0.1

libreoffice-help-ca: before 7.1.8.1-11.0.1

libreoffice-help-bn: before 7.1.8.1-11.0.1

libreoffice-help-bg: before 7.1.8.1-11.0.1

libreoffice-help-ar: before 7.1.8.1-11.0.1

libreoffice-gtk3: before 7.1.8.1-11.0.1

libreoffice-gdb-debug-support: before 7.1.8.1-11.0.1

libreoffice-filters: before 7.1.8.1-11.0.1

libreoffice-emailmerge: before 7.1.8.1-11.0.1

libreoffice-draw: before 7.1.8.1-11.0.1

libreoffice-base: before 7.1.8.1-11.0.1

libreoffice-writer: before 7.1.8.1-11.0.1

libreoffice-ure: before 7.1.8.1-11.0.1

libreoffice-sdk-doc: before 7.1.8.1-11.0.1

libreoffice-pyuno: before 7.1.8.1-11.0.1

libreoffice-pdfimport: before 7.1.8.1-11.0.1

libreoffice-ogltrans: before 7.1.8.1-11.0.1

libreoffice-langpack-en: before 7.1.8.1-11.0.1

libreoffice-impress: before 7.1.8.1-11.0.1

libreoffice-help-en: before 7.1.8.1-11.0.1

libreoffice-graphicfilter: before 7.1.8.1-11.0.1

libreoffice-core: before 7.1.8.1-11.0.1

libreoffice-calc: before 7.1.8.1-11.0.1

CPE2.3 External links

https://anas.openanolis.cn/errata/detail/ANSA-2024:0121


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Improper validation of array index

EUVDB-ID: #VU76612

Risk: High

CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-0950

CWE-ID: CWE-129 - Improper Validation of Array Index

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to improper validation of array index when malformed spreadsheet formulas, such as AGGREGATE. A remote attacker can trick the victim to open a specially crafted file, trigger an array index underflow and execute arbitrary code on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

libreoffice-ure-common: before 7.1.8.1-11.0.1

libreoffice-opensymbol-fonts: before 7.1.8.1-11.0.1

libreoffice-data: before 7.1.8.1-11.0.1

autocorr-zh: before 7.1.8.1-11.0.1

autocorr-vi: before 7.1.8.1-11.0.1

autocorr-tr: before 7.1.8.1-11.0.1

autocorr-sv: before 7.1.8.1-11.0.1

autocorr-sr: before 7.1.8.1-11.0.1

autocorr-sl: before 7.1.8.1-11.0.1

autocorr-sk: before 7.1.8.1-11.0.1

autocorr-ru: before 7.1.8.1-11.0.1

autocorr-ro: before 7.1.8.1-11.0.1

autocorr-pt: before 7.1.8.1-11.0.1

autocorr-pl: before 7.1.8.1-11.0.1

autocorr-nl: before 7.1.8.1-11.0.1

autocorr-mn: before 7.1.8.1-11.0.1

autocorr-lt: before 7.1.8.1-11.0.1

autocorr-lb: before 7.1.8.1-11.0.1

autocorr-ko: before 7.1.8.1-11.0.1

autocorr-ja: before 7.1.8.1-11.0.1

autocorr-it: before 7.1.8.1-11.0.1

autocorr-is: before 7.1.8.1-11.0.1

autocorr-hu: before 7.1.8.1-11.0.1

autocorr-hr: before 7.1.8.1-11.0.1

autocorr-ga: before 7.1.8.1-11.0.1

autocorr-fr: before 7.1.8.1-11.0.1

autocorr-fi: before 7.1.8.1-11.0.1

autocorr-fa: before 7.1.8.1-11.0.1

autocorr-es: before 7.1.8.1-11.0.1

autocorr-en: before 7.1.8.1-11.0.1

autocorr-el: before 7.1.8.1-11.0.1

autocorr-de: before 7.1.8.1-11.0.1

autocorr-da: before 7.1.8.1-11.0.1

autocorr-cs: before 7.1.8.1-11.0.1

autocorr-ca: before 7.1.8.1-11.0.1

autocorr-bg: before 7.1.8.1-11.0.1

autocorr-af: before 7.1.8.1-11.0.1

libreofficekit: before 7.1.8.1-11.0.1

libreoffice-xsltfilter: before 7.1.8.1-11.0.1

libreoffice-x11: before 7.1.8.1-11.0.1

libreoffice-wiki-publisher: before 7.1.8.1-11.0.1

libreoffice-sdk: before 7.1.8.1-11.0.1

libreoffice-math: before 7.1.8.1-11.0.1

libreoffice-langpack-zu: before 7.1.8.1-11.0.1

libreoffice-langpack-zh-Hant: before 7.1.8.1-11.0.1

libreoffice-langpack-zh-Hans: before 7.1.8.1-11.0.1

libreoffice-langpack-xh: before 7.1.8.1-11.0.1

libreoffice-langpack-ve: before 7.1.8.1-11.0.1

libreoffice-langpack-uk: before 7.1.8.1-11.0.1

libreoffice-langpack-ts: before 7.1.8.1-11.0.1

libreoffice-langpack-tr: before 7.1.8.1-11.0.1

libreoffice-langpack-tn: before 7.1.8.1-11.0.1

libreoffice-langpack-th: before 7.1.8.1-11.0.1

libreoffice-langpack-te: before 7.1.8.1-11.0.1

libreoffice-langpack-ta: before 7.1.8.1-11.0.1

libreoffice-langpack-sv: before 7.1.8.1-11.0.1

libreoffice-langpack-st: before 7.1.8.1-11.0.1

libreoffice-langpack-ss: before 7.1.8.1-11.0.1

libreoffice-langpack-sr: before 7.1.8.1-11.0.1

libreoffice-langpack-sl: before 7.1.8.1-11.0.1

libreoffice-langpack-sk: before 7.1.8.1-11.0.1

libreoffice-langpack-si: before 7.1.8.1-11.0.1

libreoffice-langpack-ru: before 7.1.8.1-11.0.1

libreoffice-langpack-ro: before 7.1.8.1-11.0.1

libreoffice-langpack-pt-PT: before 7.1.8.1-11.0.1

libreoffice-langpack-pt-BR: before 7.1.8.1-11.0.1

libreoffice-langpack-pl: before 7.1.8.1-11.0.1

libreoffice-langpack-pa: before 7.1.8.1-11.0.1

libreoffice-langpack-or: before 7.1.8.1-11.0.1

libreoffice-langpack-nso: before 7.1.8.1-11.0.1

libreoffice-langpack-nr: before 7.1.8.1-11.0.1

libreoffice-langpack-nn: before 7.1.8.1-11.0.1

libreoffice-langpack-nl: before 7.1.8.1-11.0.1

libreoffice-langpack-nb: before 7.1.8.1-11.0.1

libreoffice-langpack-mr: before 7.1.8.1-11.0.1

libreoffice-langpack-ml: before 7.1.8.1-11.0.1

libreoffice-langpack-mai: before 7.1.8.1-11.0.1

libreoffice-langpack-lv: before 7.1.8.1-11.0.1

libreoffice-langpack-lt: before 7.1.8.1-11.0.1

libreoffice-langpack-ko: before 7.1.8.1-11.0.1

libreoffice-langpack-kn: before 7.1.8.1-11.0.1

libreoffice-langpack-kk: before 7.1.8.1-11.0.1

libreoffice-langpack-ja: before 7.1.8.1-11.0.1

libreoffice-langpack-it: before 7.1.8.1-11.0.1

libreoffice-langpack-id: before 7.1.8.1-11.0.1

libreoffice-langpack-hu: before 7.1.8.1-11.0.1

libreoffice-langpack-hr: before 7.1.8.1-11.0.1

libreoffice-langpack-hi: before 7.1.8.1-11.0.1

libreoffice-langpack-he: before 7.1.8.1-11.0.1

libreoffice-langpack-gu: before 7.1.8.1-11.0.1

libreoffice-langpack-gl: before 7.1.8.1-11.0.1

libreoffice-langpack-ga: before 7.1.8.1-11.0.1

libreoffice-langpack-fr: before 7.1.8.1-11.0.1

libreoffice-langpack-fi: before 7.1.8.1-11.0.1

libreoffice-langpack-fa: before 7.1.8.1-11.0.1

libreoffice-langpack-eu: before 7.1.8.1-11.0.1

libreoffice-langpack-et: before 7.1.8.1-11.0.1

libreoffice-langpack-es: before 7.1.8.1-11.0.1

libreoffice-langpack-el: before 7.1.8.1-11.0.1

libreoffice-langpack-dz: before 7.1.8.1-11.0.1

libreoffice-langpack-de: before 7.1.8.1-11.0.1

libreoffice-langpack-da: before 7.1.8.1-11.0.1

libreoffice-langpack-cy: before 7.1.8.1-11.0.1

libreoffice-langpack-cs: before 7.1.8.1-11.0.1

libreoffice-langpack-ca: before 7.1.8.1-11.0.1

libreoffice-langpack-br: before 7.1.8.1-11.0.1

libreoffice-langpack-bn: before 7.1.8.1-11.0.1

libreoffice-langpack-bg: before 7.1.8.1-11.0.1

libreoffice-langpack-as: before 7.1.8.1-11.0.1

libreoffice-langpack-ar: before 7.1.8.1-11.0.1

libreoffice-langpack-af: before 7.1.8.1-11.0.1

libreoffice-help-zh-Hant: before 7.1.8.1-11.0.1

libreoffice-help-zh-Hans: before 7.1.8.1-11.0.1

libreoffice-help-uk: before 7.1.8.1-11.0.1

libreoffice-help-tr: before 7.1.8.1-11.0.1

libreoffice-help-ta: before 7.1.8.1-11.0.1

libreoffice-help-sv: before 7.1.8.1-11.0.1

libreoffice-help-sl: before 7.1.8.1-11.0.1

libreoffice-help-sk: before 7.1.8.1-11.0.1

libreoffice-help-si: before 7.1.8.1-11.0.1

libreoffice-help-ru: before 7.1.8.1-11.0.1

libreoffice-help-ro: before 7.1.8.1-11.0.1

libreoffice-help-pt-PT: before 7.1.8.1-11.0.1

libreoffice-help-pt-BR: before 7.1.8.1-11.0.1

libreoffice-help-pl: before 7.1.8.1-11.0.1

libreoffice-help-nn: before 7.1.8.1-11.0.1

libreoffice-help-nl: before 7.1.8.1-11.0.1

libreoffice-help-nb: before 7.1.8.1-11.0.1

libreoffice-help-lv: before 7.1.8.1-11.0.1

libreoffice-help-lt: before 7.1.8.1-11.0.1

libreoffice-help-ko: before 7.1.8.1-11.0.1

libreoffice-help-ja: before 7.1.8.1-11.0.1

libreoffice-help-it: before 7.1.8.1-11.0.1

libreoffice-help-id: before 7.1.8.1-11.0.1

libreoffice-help-hu: before 7.1.8.1-11.0.1

libreoffice-help-hr: before 7.1.8.1-11.0.1

libreoffice-help-hi: before 7.1.8.1-11.0.1

libreoffice-help-he: before 7.1.8.1-11.0.1

libreoffice-help-gu: before 7.1.8.1-11.0.1

libreoffice-help-gl: before 7.1.8.1-11.0.1

libreoffice-help-fr: before 7.1.8.1-11.0.1

libreoffice-help-fi: before 7.1.8.1-11.0.1

libreoffice-help-eu: before 7.1.8.1-11.0.1

libreoffice-help-et: before 7.1.8.1-11.0.1

libreoffice-help-es: before 7.1.8.1-11.0.1

libreoffice-help-el: before 7.1.8.1-11.0.1

libreoffice-help-dz: before 7.1.8.1-11.0.1

libreoffice-help-de: before 7.1.8.1-11.0.1

libreoffice-help-da: before 7.1.8.1-11.0.1

libreoffice-help-cs: before 7.1.8.1-11.0.1

libreoffice-help-ca: before 7.1.8.1-11.0.1

libreoffice-help-bn: before 7.1.8.1-11.0.1

libreoffice-help-bg: before 7.1.8.1-11.0.1

libreoffice-help-ar: before 7.1.8.1-11.0.1

libreoffice-gtk3: before 7.1.8.1-11.0.1

libreoffice-gdb-debug-support: before 7.1.8.1-11.0.1

libreoffice-filters: before 7.1.8.1-11.0.1

libreoffice-emailmerge: before 7.1.8.1-11.0.1

libreoffice-draw: before 7.1.8.1-11.0.1

libreoffice-base: before 7.1.8.1-11.0.1

libreoffice-writer: before 7.1.8.1-11.0.1

libreoffice-ure: before 7.1.8.1-11.0.1

libreoffice-sdk-doc: before 7.1.8.1-11.0.1

libreoffice-pyuno: before 7.1.8.1-11.0.1

libreoffice-pdfimport: before 7.1.8.1-11.0.1

libreoffice-ogltrans: before 7.1.8.1-11.0.1

libreoffice-langpack-en: before 7.1.8.1-11.0.1

libreoffice-impress: before 7.1.8.1-11.0.1

libreoffice-help-en: before 7.1.8.1-11.0.1

libreoffice-graphicfilter: before 7.1.8.1-11.0.1

libreoffice-core: before 7.1.8.1-11.0.1

libreoffice-calc: before 7.1.8.1-11.0.1

CPE2.3 External links

https://anas.openanolis.cn/errata/detail/ANSA-2024:0121


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) External control of file name or path

EUVDB-ID: #VU77534

Risk: High

CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-1183

CWE-ID: CWE-73 - External Control of File Name or Path

Exploit availability: No

Description

The vulnerability allows a remote attacker to write files to an arbitrary location on the system.

The vulnerability exists due to improper input validation when processing files within hsqldb. A remote attacker can trick the victim to open a specially crafted odb file that contains a "database/script" file with a SCRIPT command and write contents of that file to an arbitrary location on the system.

Successful exploitation of the vulnerability can lead to full system compromise.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

libreoffice-ure-common: before 7.1.8.1-11.0.1

libreoffice-opensymbol-fonts: before 7.1.8.1-11.0.1

libreoffice-data: before 7.1.8.1-11.0.1

autocorr-zh: before 7.1.8.1-11.0.1

autocorr-vi: before 7.1.8.1-11.0.1

autocorr-tr: before 7.1.8.1-11.0.1

autocorr-sv: before 7.1.8.1-11.0.1

autocorr-sr: before 7.1.8.1-11.0.1

autocorr-sl: before 7.1.8.1-11.0.1

autocorr-sk: before 7.1.8.1-11.0.1

autocorr-ru: before 7.1.8.1-11.0.1

autocorr-ro: before 7.1.8.1-11.0.1

autocorr-pt: before 7.1.8.1-11.0.1

autocorr-pl: before 7.1.8.1-11.0.1

autocorr-nl: before 7.1.8.1-11.0.1

autocorr-mn: before 7.1.8.1-11.0.1

autocorr-lt: before 7.1.8.1-11.0.1

autocorr-lb: before 7.1.8.1-11.0.1

autocorr-ko: before 7.1.8.1-11.0.1

autocorr-ja: before 7.1.8.1-11.0.1

autocorr-it: before 7.1.8.1-11.0.1

autocorr-is: before 7.1.8.1-11.0.1

autocorr-hu: before 7.1.8.1-11.0.1

autocorr-hr: before 7.1.8.1-11.0.1

autocorr-ga: before 7.1.8.1-11.0.1

autocorr-fr: before 7.1.8.1-11.0.1

autocorr-fi: before 7.1.8.1-11.0.1

autocorr-fa: before 7.1.8.1-11.0.1

autocorr-es: before 7.1.8.1-11.0.1

autocorr-en: before 7.1.8.1-11.0.1

autocorr-el: before 7.1.8.1-11.0.1

autocorr-de: before 7.1.8.1-11.0.1

autocorr-da: before 7.1.8.1-11.0.1

autocorr-cs: before 7.1.8.1-11.0.1

autocorr-ca: before 7.1.8.1-11.0.1

autocorr-bg: before 7.1.8.1-11.0.1

autocorr-af: before 7.1.8.1-11.0.1

libreofficekit: before 7.1.8.1-11.0.1

libreoffice-xsltfilter: before 7.1.8.1-11.0.1

libreoffice-x11: before 7.1.8.1-11.0.1

libreoffice-wiki-publisher: before 7.1.8.1-11.0.1

libreoffice-sdk: before 7.1.8.1-11.0.1

libreoffice-math: before 7.1.8.1-11.0.1

libreoffice-langpack-zu: before 7.1.8.1-11.0.1

libreoffice-langpack-zh-Hant: before 7.1.8.1-11.0.1

libreoffice-langpack-zh-Hans: before 7.1.8.1-11.0.1

libreoffice-langpack-xh: before 7.1.8.1-11.0.1

libreoffice-langpack-ve: before 7.1.8.1-11.0.1

libreoffice-langpack-uk: before 7.1.8.1-11.0.1

libreoffice-langpack-ts: before 7.1.8.1-11.0.1

libreoffice-langpack-tr: before 7.1.8.1-11.0.1

libreoffice-langpack-tn: before 7.1.8.1-11.0.1

libreoffice-langpack-th: before 7.1.8.1-11.0.1

libreoffice-langpack-te: before 7.1.8.1-11.0.1

libreoffice-langpack-ta: before 7.1.8.1-11.0.1

libreoffice-langpack-sv: before 7.1.8.1-11.0.1

libreoffice-langpack-st: before 7.1.8.1-11.0.1

libreoffice-langpack-ss: before 7.1.8.1-11.0.1

libreoffice-langpack-sr: before 7.1.8.1-11.0.1

libreoffice-langpack-sl: before 7.1.8.1-11.0.1

libreoffice-langpack-sk: before 7.1.8.1-11.0.1

libreoffice-langpack-si: before 7.1.8.1-11.0.1

libreoffice-langpack-ru: before 7.1.8.1-11.0.1

libreoffice-langpack-ro: before 7.1.8.1-11.0.1

libreoffice-langpack-pt-PT: before 7.1.8.1-11.0.1

libreoffice-langpack-pt-BR: before 7.1.8.1-11.0.1

libreoffice-langpack-pl: before 7.1.8.1-11.0.1

libreoffice-langpack-pa: before 7.1.8.1-11.0.1

libreoffice-langpack-or: before 7.1.8.1-11.0.1

libreoffice-langpack-nso: before 7.1.8.1-11.0.1

libreoffice-langpack-nr: before 7.1.8.1-11.0.1

libreoffice-langpack-nn: before 7.1.8.1-11.0.1

libreoffice-langpack-nl: before 7.1.8.1-11.0.1

libreoffice-langpack-nb: before 7.1.8.1-11.0.1

libreoffice-langpack-mr: before 7.1.8.1-11.0.1

libreoffice-langpack-ml: before 7.1.8.1-11.0.1

libreoffice-langpack-mai: before 7.1.8.1-11.0.1

libreoffice-langpack-lv: before 7.1.8.1-11.0.1

libreoffice-langpack-lt: before 7.1.8.1-11.0.1

libreoffice-langpack-ko: before 7.1.8.1-11.0.1

libreoffice-langpack-kn: before 7.1.8.1-11.0.1

libreoffice-langpack-kk: before 7.1.8.1-11.0.1

libreoffice-langpack-ja: before 7.1.8.1-11.0.1

libreoffice-langpack-it: before 7.1.8.1-11.0.1

libreoffice-langpack-id: before 7.1.8.1-11.0.1

libreoffice-langpack-hu: before 7.1.8.1-11.0.1

libreoffice-langpack-hr: before 7.1.8.1-11.0.1

libreoffice-langpack-hi: before 7.1.8.1-11.0.1

libreoffice-langpack-he: before 7.1.8.1-11.0.1

libreoffice-langpack-gu: before 7.1.8.1-11.0.1

libreoffice-langpack-gl: before 7.1.8.1-11.0.1

libreoffice-langpack-ga: before 7.1.8.1-11.0.1

libreoffice-langpack-fr: before 7.1.8.1-11.0.1

libreoffice-langpack-fi: before 7.1.8.1-11.0.1

libreoffice-langpack-fa: before 7.1.8.1-11.0.1

libreoffice-langpack-eu: before 7.1.8.1-11.0.1

libreoffice-langpack-et: before 7.1.8.1-11.0.1

libreoffice-langpack-es: before 7.1.8.1-11.0.1

libreoffice-langpack-el: before 7.1.8.1-11.0.1

libreoffice-langpack-dz: before 7.1.8.1-11.0.1

libreoffice-langpack-de: before 7.1.8.1-11.0.1

libreoffice-langpack-da: before 7.1.8.1-11.0.1

libreoffice-langpack-cy: before 7.1.8.1-11.0.1

libreoffice-langpack-cs: before 7.1.8.1-11.0.1

libreoffice-langpack-ca: before 7.1.8.1-11.0.1

libreoffice-langpack-br: before 7.1.8.1-11.0.1

libreoffice-langpack-bn: before 7.1.8.1-11.0.1

libreoffice-langpack-bg: before 7.1.8.1-11.0.1

libreoffice-langpack-as: before 7.1.8.1-11.0.1

libreoffice-langpack-ar: before 7.1.8.1-11.0.1

libreoffice-langpack-af: before 7.1.8.1-11.0.1

libreoffice-help-zh-Hant: before 7.1.8.1-11.0.1

libreoffice-help-zh-Hans: before 7.1.8.1-11.0.1

libreoffice-help-uk: before 7.1.8.1-11.0.1

libreoffice-help-tr: before 7.1.8.1-11.0.1

libreoffice-help-ta: before 7.1.8.1-11.0.1

libreoffice-help-sv: before 7.1.8.1-11.0.1

libreoffice-help-sl: before 7.1.8.1-11.0.1

libreoffice-help-sk: before 7.1.8.1-11.0.1

libreoffice-help-si: before 7.1.8.1-11.0.1

libreoffice-help-ru: before 7.1.8.1-11.0.1

libreoffice-help-ro: before 7.1.8.1-11.0.1

libreoffice-help-pt-PT: before 7.1.8.1-11.0.1

libreoffice-help-pt-BR: before 7.1.8.1-11.0.1

libreoffice-help-pl: before 7.1.8.1-11.0.1

libreoffice-help-nn: before 7.1.8.1-11.0.1

libreoffice-help-nl: before 7.1.8.1-11.0.1

libreoffice-help-nb: before 7.1.8.1-11.0.1

libreoffice-help-lv: before 7.1.8.1-11.0.1

libreoffice-help-lt: before 7.1.8.1-11.0.1

libreoffice-help-ko: before 7.1.8.1-11.0.1

libreoffice-help-ja: before 7.1.8.1-11.0.1

libreoffice-help-it: before 7.1.8.1-11.0.1

libreoffice-help-id: before 7.1.8.1-11.0.1

libreoffice-help-hu: before 7.1.8.1-11.0.1

libreoffice-help-hr: before 7.1.8.1-11.0.1

libreoffice-help-hi: before 7.1.8.1-11.0.1

libreoffice-help-he: before 7.1.8.1-11.0.1

libreoffice-help-gu: before 7.1.8.1-11.0.1

libreoffice-help-gl: before 7.1.8.1-11.0.1

libreoffice-help-fr: before 7.1.8.1-11.0.1

libreoffice-help-fi: before 7.1.8.1-11.0.1

libreoffice-help-eu: before 7.1.8.1-11.0.1

libreoffice-help-et: before 7.1.8.1-11.0.1

libreoffice-help-es: before 7.1.8.1-11.0.1

libreoffice-help-el: before 7.1.8.1-11.0.1

libreoffice-help-dz: before 7.1.8.1-11.0.1

libreoffice-help-de: before 7.1.8.1-11.0.1

libreoffice-help-da: before 7.1.8.1-11.0.1

libreoffice-help-cs: before 7.1.8.1-11.0.1

libreoffice-help-ca: before 7.1.8.1-11.0.1

libreoffice-help-bn: before 7.1.8.1-11.0.1

libreoffice-help-bg: before 7.1.8.1-11.0.1

libreoffice-help-ar: before 7.1.8.1-11.0.1

libreoffice-gtk3: before 7.1.8.1-11.0.1

libreoffice-gdb-debug-support: before 7.1.8.1-11.0.1

libreoffice-filters: before 7.1.8.1-11.0.1

libreoffice-emailmerge: before 7.1.8.1-11.0.1

libreoffice-draw: before 7.1.8.1-11.0.1

libreoffice-base: before 7.1.8.1-11.0.1

libreoffice-writer: before 7.1.8.1-11.0.1

libreoffice-ure: before 7.1.8.1-11.0.1

libreoffice-sdk-doc: before 7.1.8.1-11.0.1

libreoffice-pyuno: before 7.1.8.1-11.0.1

libreoffice-pdfimport: before 7.1.8.1-11.0.1

libreoffice-ogltrans: before 7.1.8.1-11.0.1

libreoffice-langpack-en: before 7.1.8.1-11.0.1

libreoffice-impress: before 7.1.8.1-11.0.1

libreoffice-help-en: before 7.1.8.1-11.0.1

libreoffice-graphicfilter: before 7.1.8.1-11.0.1

libreoffice-core: before 7.1.8.1-11.0.1

libreoffice-calc: before 7.1.8.1-11.0.1

CPE2.3 External links

https://anas.openanolis.cn/errata/detail/ANSA-2024:0121


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Insufficient UI Warning of Dangerous Operations

EUVDB-ID: #VU76613

Risk: Medium

CVSSv4.0: 1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-2255

CWE-ID: CWE-357 - Insufficient UI Warning of Dangerous Operations

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to the application allows usage of floating frames that can fetch content from external sources without prompting the user. A remote attacker can trick the victim to open a specially crafted file and perform spoofing attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

libreoffice-ure-common: before 7.1.8.1-11.0.1

libreoffice-opensymbol-fonts: before 7.1.8.1-11.0.1

libreoffice-data: before 7.1.8.1-11.0.1

autocorr-zh: before 7.1.8.1-11.0.1

autocorr-vi: before 7.1.8.1-11.0.1

autocorr-tr: before 7.1.8.1-11.0.1

autocorr-sv: before 7.1.8.1-11.0.1

autocorr-sr: before 7.1.8.1-11.0.1

autocorr-sl: before 7.1.8.1-11.0.1

autocorr-sk: before 7.1.8.1-11.0.1

autocorr-ru: before 7.1.8.1-11.0.1

autocorr-ro: before 7.1.8.1-11.0.1

autocorr-pt: before 7.1.8.1-11.0.1

autocorr-pl: before 7.1.8.1-11.0.1

autocorr-nl: before 7.1.8.1-11.0.1

autocorr-mn: before 7.1.8.1-11.0.1

autocorr-lt: before 7.1.8.1-11.0.1

autocorr-lb: before 7.1.8.1-11.0.1

autocorr-ko: before 7.1.8.1-11.0.1

autocorr-ja: before 7.1.8.1-11.0.1

autocorr-it: before 7.1.8.1-11.0.1

autocorr-is: before 7.1.8.1-11.0.1

autocorr-hu: before 7.1.8.1-11.0.1

autocorr-hr: before 7.1.8.1-11.0.1

autocorr-ga: before 7.1.8.1-11.0.1

autocorr-fr: before 7.1.8.1-11.0.1

autocorr-fi: before 7.1.8.1-11.0.1

autocorr-fa: before 7.1.8.1-11.0.1

autocorr-es: before 7.1.8.1-11.0.1

autocorr-en: before 7.1.8.1-11.0.1

autocorr-el: before 7.1.8.1-11.0.1

autocorr-de: before 7.1.8.1-11.0.1

autocorr-da: before 7.1.8.1-11.0.1

autocorr-cs: before 7.1.8.1-11.0.1

autocorr-ca: before 7.1.8.1-11.0.1

autocorr-bg: before 7.1.8.1-11.0.1

autocorr-af: before 7.1.8.1-11.0.1

libreofficekit: before 7.1.8.1-11.0.1

libreoffice-xsltfilter: before 7.1.8.1-11.0.1

libreoffice-x11: before 7.1.8.1-11.0.1

libreoffice-wiki-publisher: before 7.1.8.1-11.0.1

libreoffice-sdk: before 7.1.8.1-11.0.1

libreoffice-math: before 7.1.8.1-11.0.1

libreoffice-langpack-zu: before 7.1.8.1-11.0.1

libreoffice-langpack-zh-Hant: before 7.1.8.1-11.0.1

libreoffice-langpack-zh-Hans: before 7.1.8.1-11.0.1

libreoffice-langpack-xh: before 7.1.8.1-11.0.1

libreoffice-langpack-ve: before 7.1.8.1-11.0.1

libreoffice-langpack-uk: before 7.1.8.1-11.0.1

libreoffice-langpack-ts: before 7.1.8.1-11.0.1

libreoffice-langpack-tr: before 7.1.8.1-11.0.1

libreoffice-langpack-tn: before 7.1.8.1-11.0.1

libreoffice-langpack-th: before 7.1.8.1-11.0.1

libreoffice-langpack-te: before 7.1.8.1-11.0.1

libreoffice-langpack-ta: before 7.1.8.1-11.0.1

libreoffice-langpack-sv: before 7.1.8.1-11.0.1

libreoffice-langpack-st: before 7.1.8.1-11.0.1

libreoffice-langpack-ss: before 7.1.8.1-11.0.1

libreoffice-langpack-sr: before 7.1.8.1-11.0.1

libreoffice-langpack-sl: before 7.1.8.1-11.0.1

libreoffice-langpack-sk: before 7.1.8.1-11.0.1

libreoffice-langpack-si: before 7.1.8.1-11.0.1

libreoffice-langpack-ru: before 7.1.8.1-11.0.1

libreoffice-langpack-ro: before 7.1.8.1-11.0.1

libreoffice-langpack-pt-PT: before 7.1.8.1-11.0.1

libreoffice-langpack-pt-BR: before 7.1.8.1-11.0.1

libreoffice-langpack-pl: before 7.1.8.1-11.0.1

libreoffice-langpack-pa: before 7.1.8.1-11.0.1

libreoffice-langpack-or: before 7.1.8.1-11.0.1

libreoffice-langpack-nso: before 7.1.8.1-11.0.1

libreoffice-langpack-nr: before 7.1.8.1-11.0.1

libreoffice-langpack-nn: before 7.1.8.1-11.0.1

libreoffice-langpack-nl: before 7.1.8.1-11.0.1

libreoffice-langpack-nb: before 7.1.8.1-11.0.1

libreoffice-langpack-mr: before 7.1.8.1-11.0.1

libreoffice-langpack-ml: before 7.1.8.1-11.0.1

libreoffice-langpack-mai: before 7.1.8.1-11.0.1

libreoffice-langpack-lv: before 7.1.8.1-11.0.1

libreoffice-langpack-lt: before 7.1.8.1-11.0.1

libreoffice-langpack-ko: before 7.1.8.1-11.0.1

libreoffice-langpack-kn: before 7.1.8.1-11.0.1

libreoffice-langpack-kk: before 7.1.8.1-11.0.1

libreoffice-langpack-ja: before 7.1.8.1-11.0.1

libreoffice-langpack-it: before 7.1.8.1-11.0.1

libreoffice-langpack-id: before 7.1.8.1-11.0.1

libreoffice-langpack-hu: before 7.1.8.1-11.0.1

libreoffice-langpack-hr: before 7.1.8.1-11.0.1

libreoffice-langpack-hi: before 7.1.8.1-11.0.1

libreoffice-langpack-he: before 7.1.8.1-11.0.1

libreoffice-langpack-gu: before 7.1.8.1-11.0.1

libreoffice-langpack-gl: before 7.1.8.1-11.0.1

libreoffice-langpack-ga: before 7.1.8.1-11.0.1

libreoffice-langpack-fr: before 7.1.8.1-11.0.1

libreoffice-langpack-fi: before 7.1.8.1-11.0.1

libreoffice-langpack-fa: before 7.1.8.1-11.0.1

libreoffice-langpack-eu: before 7.1.8.1-11.0.1

libreoffice-langpack-et: before 7.1.8.1-11.0.1

libreoffice-langpack-es: before 7.1.8.1-11.0.1

libreoffice-langpack-el: before 7.1.8.1-11.0.1

libreoffice-langpack-dz: before 7.1.8.1-11.0.1

libreoffice-langpack-de: before 7.1.8.1-11.0.1

libreoffice-langpack-da: before 7.1.8.1-11.0.1

libreoffice-langpack-cy: before 7.1.8.1-11.0.1

libreoffice-langpack-cs: before 7.1.8.1-11.0.1

libreoffice-langpack-ca: before 7.1.8.1-11.0.1

libreoffice-langpack-br: before 7.1.8.1-11.0.1

libreoffice-langpack-bn: before 7.1.8.1-11.0.1

libreoffice-langpack-bg: before 7.1.8.1-11.0.1

libreoffice-langpack-as: before 7.1.8.1-11.0.1

libreoffice-langpack-ar: before 7.1.8.1-11.0.1

libreoffice-langpack-af: before 7.1.8.1-11.0.1

libreoffice-help-zh-Hant: before 7.1.8.1-11.0.1

libreoffice-help-zh-Hans: before 7.1.8.1-11.0.1

libreoffice-help-uk: before 7.1.8.1-11.0.1

libreoffice-help-tr: before 7.1.8.1-11.0.1

libreoffice-help-ta: before 7.1.8.1-11.0.1

libreoffice-help-sv: before 7.1.8.1-11.0.1

libreoffice-help-sl: before 7.1.8.1-11.0.1

libreoffice-help-sk: before 7.1.8.1-11.0.1

libreoffice-help-si: before 7.1.8.1-11.0.1

libreoffice-help-ru: before 7.1.8.1-11.0.1

libreoffice-help-ro: before 7.1.8.1-11.0.1

libreoffice-help-pt-PT: before 7.1.8.1-11.0.1

libreoffice-help-pt-BR: before 7.1.8.1-11.0.1

libreoffice-help-pl: before 7.1.8.1-11.0.1

libreoffice-help-nn: before 7.1.8.1-11.0.1

libreoffice-help-nl: before 7.1.8.1-11.0.1

libreoffice-help-nb: before 7.1.8.1-11.0.1

libreoffice-help-lv: before 7.1.8.1-11.0.1

libreoffice-help-lt: before 7.1.8.1-11.0.1

libreoffice-help-ko: before 7.1.8.1-11.0.1

libreoffice-help-ja: before 7.1.8.1-11.0.1

libreoffice-help-it: before 7.1.8.1-11.0.1

libreoffice-help-id: before 7.1.8.1-11.0.1

libreoffice-help-hu: before 7.1.8.1-11.0.1

libreoffice-help-hr: before 7.1.8.1-11.0.1

libreoffice-help-hi: before 7.1.8.1-11.0.1

libreoffice-help-he: before 7.1.8.1-11.0.1

libreoffice-help-gu: before 7.1.8.1-11.0.1

libreoffice-help-gl: before 7.1.8.1-11.0.1

libreoffice-help-fr: before 7.1.8.1-11.0.1

libreoffice-help-fi: before 7.1.8.1-11.0.1

libreoffice-help-eu: before 7.1.8.1-11.0.1

libreoffice-help-et: before 7.1.8.1-11.0.1

libreoffice-help-es: before 7.1.8.1-11.0.1

libreoffice-help-el: before 7.1.8.1-11.0.1

libreoffice-help-dz: before 7.1.8.1-11.0.1

libreoffice-help-de: before 7.1.8.1-11.0.1

libreoffice-help-da: before 7.1.8.1-11.0.1

libreoffice-help-cs: before 7.1.8.1-11.0.1

libreoffice-help-ca: before 7.1.8.1-11.0.1

libreoffice-help-bn: before 7.1.8.1-11.0.1

libreoffice-help-bg: before 7.1.8.1-11.0.1

libreoffice-help-ar: before 7.1.8.1-11.0.1

libreoffice-gtk3: before 7.1.8.1-11.0.1

libreoffice-gdb-debug-support: before 7.1.8.1-11.0.1

libreoffice-filters: before 7.1.8.1-11.0.1

libreoffice-emailmerge: before 7.1.8.1-11.0.1

libreoffice-draw: before 7.1.8.1-11.0.1

libreoffice-base: before 7.1.8.1-11.0.1

libreoffice-writer: before 7.1.8.1-11.0.1

libreoffice-ure: before 7.1.8.1-11.0.1

libreoffice-sdk-doc: before 7.1.8.1-11.0.1

libreoffice-pyuno: before 7.1.8.1-11.0.1

libreoffice-pdfimport: before 7.1.8.1-11.0.1

libreoffice-ogltrans: before 7.1.8.1-11.0.1

libreoffice-langpack-en: before 7.1.8.1-11.0.1

libreoffice-impress: before 7.1.8.1-11.0.1

libreoffice-help-en: before 7.1.8.1-11.0.1

libreoffice-graphicfilter: before 7.1.8.1-11.0.1

libreoffice-core: before 7.1.8.1-11.0.1

libreoffice-calc: before 7.1.8.1-11.0.1

CPE2.3 External links

https://anas.openanolis.cn/errata/detail/ANSA-2024:0121


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###