Known vulnerabilities in libreoffice-core (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:libreoffice-core_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 17
Public exploits: 3
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libreoffice-core (Ubuntu package) libreoffice-core (Ubuntu package) is affected by 17 known vulnerabilities: 8 high, 2 medium, 7 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60762 - Improper Certificate Validation
CVE-2021-25636
CWE-295 Low
No
No
1:6.0.7-0ubuntu0.18.04.11, 1:6.4.7-0ubuntu0.20.04.4, 1:7.2.5-0ubuntu0.21.10.3 22.02.2022 SB2022022217
SB2022031624
SB2022110838
and 4 more
#VU57214 - Improper Certificate Validation
CVE-2021-25633
CWE-295 Medium
No
No
1:6.4.7-0ubuntu0.20.04.2 11.10.2021 SB2021101113
SB2021101902
SB2022051139
and 2 more
#VU57213 - Improper Verification of Cryptographic Signature
CVE-2021-25634
CWE-347 Medium
No
No
1:6.4.7-0ubuntu0.20.04.2 11.10.2021 SB2021101113
SB2021101902
SB2022051139
and 2 more
#VU20956 - Improper input validation
CVE-2019-9850
CWE-20 High
No
No
1:5.1.6~rc2-0ubuntu1~xenial9, 1:6.0.7-0ubuntu0.18.04.9, 1:6.2.6-0ubuntu0.19.04.1 10.09.2019 SB2019081530
SB2019090309
SB2019092505
and 6 more
#VU20861 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-9852
CWE-22 High
No
No
1:5.1.6~rc2-0ubuntu1~xenial9, 1:6.0.7-0ubuntu0.18.04.9, 1:6.2.6-0ubuntu0.19.04.1 04.09.2019 SB2019081530
SB2019090309
SB2019092505
and 6 more
#VU20860 - Improper input validation
CVE-2019-9851
CWE-20 High
Available
Exploited
1:5.1.6~rc2-0ubuntu1~xenial9, 1:6.0.7-0ubuntu0.18.04.9, 1:6.2.6-0ubuntu0.19.04.1 04.09.2019 SB2019081530
SB2019090309
SB2019092505
and 6 more
#VU19225 - Permissions, Privileges, and Access Controls
CVE-2019-9849
CWE-264 Low
No
No
1:5.1.6~rc2-0ubuntu1~xenial8, 1:6.0.7-0ubuntu0.18.04.8, 1:6.2.5-0ubuntu0.19.04.1 17.07.2019 SB2019071703
SB2019071704
SB2019072301
and 11 more
#VU19223 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-9848
CWE-94 High
Available
Exploited
1:5.1.6~rc2-0ubuntu1~xenial8, 1:6.0.7-0ubuntu0.18.04.8, 1:6.2.5-0ubuntu0.19.04.1 17.07.2019 SB2019071703
SB2019071704
SB2019072301
and 10 more
#VU17362 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-16858
CWE-22 High
Available
Exploited
1:4.2.8-0ubuntu5.5, 1:5.1.6~rc2-0ubuntu1~xenial6 04.02.2019 SB2019020401
SB2019020205
SB2019080611
and 3 more
#VU17346 - Buffer overflow
CVE-2018-11790
CWE-120 High
No
No
1:4.2.8-0ubuntu5.5 01.02.2019 SB2019020105
SB2019020631
#VU12887 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10583
CWE-200 Low
Available
No
1:4.2.8-0ubuntu5.5, 1:5.1.6~rc2-0ubuntu1~xenial6 21.05.2018 SB2018052219
SB2018082804
SB2018082805
and 5 more
#VU12120 - Heap-based Buffer Overflow
CVE-2018-10120
CWE-122 Low
No
No
1:4.2.8-0ubuntu5.5, 1:5.1.6~rc2-0ubuntu1~xenial6 24.04.2018 SB2018042108
SB2018051708
SB2018103021
and 2 more
#VU12119 - Use After Free
CVE-2018-10119
CWE-416 Low
No
No
1:4.2.8-0ubuntu5.5, 1:5.1.6~rc2-0ubuntu1~xenial6 24.04.2018 SB2018042108
SB2018051708
SB2018103021
and 2 more
#VU8963 - Out-of-bounds write
CVE-2017-12608
CWE-787 High
No
No
1:4.2.8-0ubuntu5.2 27.10.2017 SB2017102706
SB2017110218
SB2017110901
#VU8962 - Out-of-bounds write
CVE-2017-12607
CWE-787 High
No
No
1:4.2.8-0ubuntu5.2 27.10.2017 SB2017102706
SB2017110218
SB2017110901
#VU32334 - Memory corruption
CVE-2016-0795
CWE-119 Low
No
No
1:3.5.7-0ubuntu10, 1:4.2.8-0ubuntu4, 1:5.0.5~rc2-0ubuntu2 18.02.2016 SB2016021802
SB2016022310
SB2016021906
and 1 more
#VU32333 - Memory corruption
CVE-2016-0794
CWE-119 Low
No
No
1:3.5.7-0ubuntu10, 1:4.2.8-0ubuntu4, 1:5.0.5~rc2-0ubuntu2 18.02.2016 SB2016021801
SB2016022309
SB2016021906
and 1 more