SB2020060910 - OpenSUSE Linux update for libreoffice

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2020060910

SB2020060910 - OpenSUSE Linux update for libreoffice

Published: June 9, 2020

Security Bulletin ID SB2020060910
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Information disclosure (CVE-ID: CVE-2020-12801)

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to an error when processing encrypted files in LibreOffice. If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted.

This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted.


Remediation

Install update from vendor's website.

References