Improper certificate validation in LibreOffice - CVE-2021-25636

Vulnerability identifier: #VU60762

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-25636

CWE-ID: CWE-295

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a spoofing attack.

The vulnerability exists due to improper certificate validation when processing digital signatures of ODF documents. A remote attacker can modify the documentsignatures.xml or macrosignatures.xml stream within the document to contain both "X509Data" and "KeyValue" children of the "KeyInfo" tag[1], which when opened caused LibreOffice to verify using the "KeyValue" but to report verification with the unrelated "X509Data" value.

LibreOffice
Oracle Linux
SUSE Manager Server
SUSE Manager Proxy
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
Ubuntu
Fedora
libreoffice (Red Hat package)
SUSE Linux Enterprise Module for Packagehub Subpackages
libreoffice-core (Ubuntu package)
libreoffice
libreoffice-impress-debuginfo
libreoffice-l10n-ar
libreoffice-librelogo
libreoffice-mailmerge
libreoffice-math
libreoffice-math-debuginfo
libreoffice-officebean
libreoffice-officebean-debuginfo
libreoffice-pyuno
libreoffice-pyuno-debuginfo
libreoffice-writer
libreoffice-writer-debuginfo
libreoffice-writer-extensions
libreoffice-branding-upstream
libreoffice-icon-themes
libreoffice-l10n-af
libreoffice-filters-optional
libreoffice-debuginfo
libreoffice-base
libreoffice-base-debuginfo
libreoffice-base-drivers-postgresql
libreoffice-base-drivers-postgresql-debuginfo
libreoffice-calc
libreoffice-calc-debuginfo
libreoffice-calc-extensions
libreoffice-impress
libreoffice-debugsource
libreoffice-draw
libreoffice-draw-debuginfo
libreoffice-gnome
libreoffice-gnome-debuginfo
libreoffice-gtk3
libreoffice-gtk3-debuginfo
libreoffice-l10n-sk
libreoffice-l10n-nl
libreoffice-l10n-nn
libreoffice-l10n-pl
libreoffice-l10n-pt_BR
libreoffice-l10n-bg
libreoffice-l10n-pt_PT
libreoffice-l10n-ro
libreoffice-l10n-ru
libreoffice-l10n-ca
libreoffice-l10n-sv
libreoffice-l10n-uk
libreoffice-l10n-xh
libreoffice-l10n-zh_CN
libreoffice-l10n-zh_TW
libreoffice-l10n-zu
libreoffice-sdk
libreoffice-sdk-debuginfo
libreoffice-l10n-lt
libreoffice-l10n-nb
libreoffice-l10n-cs
libreoffice-l10n-da
libreoffice-l10n-de
libreoffice-l10n-en
libreoffice-l10n-es
libreoffice-l10n-fi
libreoffice-l10n-fr
libreoffice-l10n-hi
libreoffice-l10n-hr
libreoffice-l10n-hu
libreoffice-l10n-it
libreoffice-l10n-ja
libreoffice-l10n-ko
libreoffice-l10n-gu
libreoffice-l10n-gug
libreoffice-l10n-hsb
libreoffice-l10n-id
libreoffice-l10n-is
libreoffice-l10n-ka
libreoffice-l10n-kab
libreoffice-l10n-km
libreoffice-l10n-kmr_Latn
libreoffice-l10n-kok
libreoffice-l10n-ks
libreoffice-l10n-lb
libreoffice-l10n-gd
libreoffice-l10n-fy
libreoffice-l10n-en_ZA
libreoffice-l10n-en_GB
libreoffice-l10n-dsb
libreoffice-l10n-dgo
libreoffice-l10n-ca_valencia
libreoffice-l10n-bs
libreoffice-l10n-brx
libreoffice-l10n-bo
libreoffice-l10n-bn_IN
libreoffice-l10n-sd
libreoffice-l10n-be
libreoffice-l10n-vi
libreoffice-l10n-vec
libreoffice-l10n-uz
libreoffice-l10n-ug
libreoffice-l10n-tt
libreoffice-l10n-tg
libreoffice-l10n-szl
libreoffice-l10n-sw_TZ
libreoffice-l10n-sq
libreoffice-l10n-sid
libreoffice-l10n-lo
libreoffice-l10n-sat
libreoffice-l10n-sa_IN
libreoffice-l10n-rw
libreoffice-l10n-om
libreoffice-l10n-oc
libreoffice-l10n-ne
libreoffice-l10n-my
libreoffice-l10n-mni
libreoffice-l10n-mn
libreoffice-l10n-mk
libreofficekit
libreoffice-l10n-as
libreoffice-l10n-bn
libreoffice-l10n-br
libreoffice-l10n-ckb
libreoffice-l10n-cy
libreoffice-l10n-dz
libreoffice-l10n-el
libreoffice-l10n-eo
libreoffice-l10n-et
libreoffice-l10n-eu
libreoffice-l10n-fa
libreoffice-l10n-fur
libreoffice-l10n-ga
libreoffice-l10n-gl
libreoffice-l10n-sl
libreoffice-l10n-sr
libreoffice-l10n-ss
libreoffice-l10n-st
libreoffice-l10n-ta
libreoffice-l10n-te
libreoffice-l10n-th
libreoffice-l10n-tn
libreoffice-l10n-tr
libreoffice-l10n-ts
libreoffice-l10n-ve
libreoffice-qt5
libreoffice-qt5-debuginfo
libreoffice-sdk-doc
libreofficekit-devel
libreoffice-gdb-pretty-printers
libreoffice-glade
libreoffice-l10n-am
libreoffice-l10n-ast
libreoffice-l10n-mr
libreoffice-l10n-he
libreoffice-l10n-kk
libreoffice-l10n-kn
libreoffice-l10n-lv
libreoffice-l10n-mai
libreoffice-l10n-ml
libreoffice-l10n-nr
libreoffice-l10n-nso
libreoffice-l10n-or
libreoffice-l10n-pa
libreoffice-l10n-si

Install updates from vendor's website.

LibreOffice - addressed in versions 7.2.6.1, 7.3.1.1
libreoffice (Red Hat package) - update to 6.4.7.2-11.el8
libreoffice-core (Ubuntu package) - addressed in versions 1:6.0.7-0ubuntu0.18.04.11, 1:6.4.7-0ubuntu0.20.04.4, 1:7.2.5-0ubuntu0.21.10.3
libreoffice - update to 7.1.8.1-4.fc34
libreoffice-impress-debuginfo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ar - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-librelogo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-mailmerge - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-math - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-math-debuginfo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-officebean - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-officebean-debuginfo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-pyuno - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-pyuno-debuginfo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-writer - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-writer-debuginfo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-writer-extensions - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-branding-upstream - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-icon-themes - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-af - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-filters-optional - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-debuginfo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-base - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-base-debuginfo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-base-drivers-postgresql - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-base-drivers-postgresql-debuginfo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-calc - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-calc-debuginfo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-calc-extensions - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-impress - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-debugsource - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-draw - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-draw-debuginfo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-gnome - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-gnome-debuginfo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-gtk3 - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-gtk3-debuginfo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-sk - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-nl - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-nn - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-pl - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-pt_BR - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-bg - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-pt_PT - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ro - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ru - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ca - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-sv - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-uk - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-xh - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-zh_CN - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-zh_TW - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-zu - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-sdk - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-sdk-debuginfo - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-lt - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-nb - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-cs - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-da - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-de - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-en - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-es - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-fi - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-fr - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-hi - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-hr - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-hu - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-it - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ja - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ko - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-gu - addressed in versions 7.2.5.1-48.19.4, 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-gug - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-hsb - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-id - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-is - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ka - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-kab - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-km - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-kmr_Latn - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-kok - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ks - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-lb - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-gd - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-fy - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-en_ZA - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-en_GB - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-dsb - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-dgo - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ca_valencia - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-bs - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-brx - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-bo - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-bn_IN - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-sd - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-be - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-vi - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-vec - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-uz - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ug - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-tt - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-tg - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-szl - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-sw_TZ - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-sq - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-sid - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-lo - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-sat - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-sa_IN - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-rw - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-om - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-oc - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ne - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-my - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-mni - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-mn - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-mk - update to 7.2.5.1-150300.14.22.18.3
libreofficekit - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-as - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-bn - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-br - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ckb - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-cy - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-dz - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-el - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-eo - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-et - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-eu - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-fa - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-fur - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ga - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-gl - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-sl - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-sr - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ss - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-st - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ta - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-te - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-th - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-tn - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-tr - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ts - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ve - update to 7.2.5.1-150300.14.22.18.3
libreoffice-qt5 - update to 7.2.5.1-150300.14.22.18.3
libreoffice-qt5-debuginfo - update to 7.2.5.1-150300.14.22.18.3
libreoffice-sdk-doc - update to 7.2.5.1-150300.14.22.18.3
libreofficekit-devel - update to 7.2.5.1-150300.14.22.18.3
libreoffice-gdb-pretty-printers - update to 7.2.5.1-150300.14.22.18.3
libreoffice-glade - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-am - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ast - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-mr - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-he - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-kk - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-kn - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-lv - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-mai - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-ml - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-nr - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-nso - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-or - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-pa - update to 7.2.5.1-150300.14.22.18.3
libreoffice-l10n-si - update to 7.2.5.1-150300.14.22.18.3

• https://www.libreoffice.org/about-us/security/advisories/cve-2021-25636/

• Document spoofing in LibreOffice
• Ubuntu update for libreoffice
• Red Hat Enterprise Linux 8 update for libreoffice
• SUSE update for libreoffice
• SUSE update for libreoffice
• Multiple vulnerabilities in Oracle Linux
• Fedora 34 update for libreoffice