Known vulnerabilities in libreoffice-core (Ubuntu package) 1:4.2.8-0ubuntu2

Version: 1:4.2.8-0ubuntu2
Software CPE: cpe:2.3:o:canonical:libreoffice-core_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 9
Public exploits: 2
Known exploited (KEV): 1

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting libreoffice-core (Ubuntu package) version 1:4.2.8-0ubuntu2 libreoffice-core (Ubuntu package) 1:4.2.8-0ubuntu2 is affected by 9 vulnerabilities: 4 high, 5 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU17362 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-16858
CWE-22 High
Public exploit available
Exploited
1:4.2.8-0ubuntu5.5, 1:5.1.6~rc2-0ubuntu1~xenial6 04.02.2019 SB2019020401
SB2019020205
SB2019080611
and 3 more
#VU17346 - Buffer overflow
CVE-2018-11790
CWE-120 High
No
No
1:4.2.8-0ubuntu5.5 01.02.2019 SB2019020105
SB2019020631
#VU12887 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10583
CWE-200 Low
Public exploit available
No
1:4.2.8-0ubuntu5.5, 1:5.1.6~rc2-0ubuntu1~xenial6 21.05.2018 SB2018052219
SB2018082804
SB2018082805
and 5 more
#VU12120 - Heap-based Buffer Overflow
CVE-2018-10120
CWE-122 Low
No
No
1:4.2.8-0ubuntu5.5, 1:5.1.6~rc2-0ubuntu1~xenial6 24.04.2018 SB2018042108
SB2018051708
SB2018103021
and 2 more
#VU12119 - Use After Free
CVE-2018-10119
CWE-416 Low
No
No
1:4.2.8-0ubuntu5.5, 1:5.1.6~rc2-0ubuntu1~xenial6 24.04.2018 SB2018042108
SB2018051708
SB2018103021
and 2 more
#VU8963 - Out-of-bounds write
CVE-2017-12608
CWE-787 High
No
No
1:4.2.8-0ubuntu5.2 27.10.2017 SB2017102706
SB2017110218
SB2017110901
#VU8962 - Out-of-bounds write
CVE-2017-12607
CWE-787 High
No
No
1:4.2.8-0ubuntu5.2 27.10.2017 SB2017102706
SB2017110218
SB2017110901
#VU32334 - Memory corruption
CVE-2016-0795
CWE-119 Low
No
No
1:3.5.7-0ubuntu10, 1:4.2.8-0ubuntu4, 1:5.0.5~rc2-0ubuntu2 18.02.2016 SB2016021802
SB2016022310
SB2016021906
and 1 more
#VU32333 - Memory corruption
CVE-2016-0794
CWE-119 Low
No
No
1:3.5.7-0ubuntu10, 1:4.2.8-0ubuntu4, 1:5.0.5~rc2-0ubuntu2 18.02.2016 SB2016021801
SB2016022309
SB2016021906
and 1 more