CVE-2018-16858highCWE-356

CVE-2018-16858: high-severity vulnerability in [UNKNOWN] libreoffice

Published · Updated

Follow this CVE+ Monitor libreoffice

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

68Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 7.8epss 67%
from disclosure to weapon20 days
Published on NVDMar 25
1st PoC+20d
metasploitOct 18
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
1 product (133 components)
Red Hat Enterprise Linux 6
no_fix_planned: Out of support scope
Fixed
5 products (1,640 components)
Red Hat Enterprise Linux Client (v. 7) · Red Hat Enterprise Linux Client Optional (v. 7) · Red Hat Enterprise Linux Server Optional (v. 7) · Red Hat Enterprise Linux Workstation (v. 7) · Red Hat Enterprise Linux Workstation Optional (v. 7)
fix ↗
Not affected
1 product (174 components) — because the vulnerable code is not present in the product
Red Hat Enterprise Linux 8
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
[UNKNOWN] · libreoffice
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.