All errata/p8/ALT-PU-2017-1477-1
ALT-PU-2017-1477-1

Package update LibreOffice in branch p8

Version5.2.6.2-alt0.M80P.1
Task#181696
Published2017-04-14
Max severityCRITICAL
Severity:

Closed issues (6)

BDU:2017-01193
CRITICAL9.8

Уязвимость функции ReadJPEG пакета офисных программ LibreOffice, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

Published: 2017-05-18Modified: 2024-11-28
CVSS 3.xCRITICAL 9.8
CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
References
BDU:2017-01548
CRITICAL9.8

Уязвимость функции HWPFile::TagsRead пакета офисных программ LibreOffice, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2017-06-30Modified: 2024-11-28
CVSS 3.xCRITICAL 9.8
CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
References
BDU:2017-01555
CRITICAL9.8

Уязвимость функции SVMConverter::ImplConvertFromSVM1 пакета офисных программ LibreOffice, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2017-06-30Modified: 2024-11-28
CVSS 3.xCRITICAL 9.8
CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P
References
CVE-2017-7856
CRITICAL9.8

LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 function in vcl/source/gdi/svmconverter.cxx.

Published: 2017-04-14Modified: 2025-04-20
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS 3.xCRITICAL 9.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
CVE-2017-7882
CRITICAL9.8

LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx.

Published: 2017-04-15Modified: 2025-04-20
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS 3.xCRITICAL 9.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
CVE-2017-8358
CRITICAL9.8

LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx.

Published: 2017-04-30Modified: 2025-04-20
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS 3.xCRITICAL 9.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References