Summary
It was discovered that =WEBSERVICE calls in a document could be used to
read arbitrary files. If a user were tricked in to opening a specially
crafted document, a remote attacker could exploit this to obtain sensitive
information. (CVE-2018-6871)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libreoffice | 1:4.2.8-0ubuntu5.3 |
| Ubuntu · 16.04 LTS 16.04:LTS | libreoffice | 1:5.1.6~rc2-0ubuntu1~xenial3 |
Vulnerabilities 1
-
Unscored —
LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in …
References
-
report
https://ubuntu.com/security/CVE-2018-6871