CVE-2018-10119
Published: 16 April 2018
sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.
Priority
Low
CVSS 3 base score: 7.8
Status
| Package | Release | Status |
|---|---|---|
|
libreoffice Launchpad, Ubuntu, Debian |
Upstream |
Needs triage
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(1:6.0.3-0ubuntu1)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Released
(1:5.1.6~rc2-0ubuntu1~xenial6)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
(trusty was released [1:4.2.8-0ubuntu5.5])
|
|
|
Patches: Upstream: https://gerrit.libreoffice.org/gitweb?p=core.git;a=commit;h=fdd41c995d1f719e92c6f083e780226114762f05 Upstream: https://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-5-4&id=59cf6c6128f67d807de58fae2d7fae2b4909ad68 (5.4) |
||
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10119
- https://www.libreoffice.org/about-us/security/advisories/cve-2018-10119/
- https://gerrit.libreoffice.org/#/c/48751/
- https://gerrit.libreoffice.org/#/c/48756/
- https://gerrit.libreoffice.org/#/c/48757/
- https://gerrit.libreoffice.org/#/c/48758/
- https://ubuntu.com/security/notices/USN-3883-1
- NVD
- Launchpad
- Debian