Improper Certificate Validation in LibreOffice - CVE-2024-6472

Vulnerability identifier: #VU95342

CSH Severity: Medium

CVSS v4: 7.1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-6472

CWE-ID: CWE-295

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due improper certificate validation when handling documents with signed macros inside. If the macro has an untrusted signature, the use can ignore the failure and enable the macros anyway.

LibreOffice
Debian Linux
Anolis OS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Ubuntu
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libreoffice (Red Hat package)
libreoffice (Ubuntu package)
libreoffice (Debian package)
libreoffice-langpack-zh-Hans
libreoffice-langpack-ss
libreoffice-langpack-st
libreoffice-langpack-sv
libreoffice-langpack-ta
libreoffice-langpack-te
libreoffice-langpack-th
libreoffice-langpack-tn
libreoffice-langpack-tr
libreoffice-langpack-ts
libreoffice-langpack-uk
libreoffice-langpack-ve
libreoffice-langpack-xh
libreoffice-langpack-sk
libreoffice-langpack-zh-Hant
libreoffice-langpack-zu
libreoffice-math
libreoffice-nlpsolver
libreoffice-ogltrans
libreoffice-pdfimport
libreoffice-pyuno
libreoffice-sdk
libreoffice-langpack-nso
libreoffice-langpack-ko
libreoffice-langpack-lt
libreoffice-langpack-lv
libreoffice-langpack-mai
libreoffice-langpack-ml
libreoffice-langpack-mr
libreoffice-langpack-nb
libreoffice-langpack-nl
libreoffice-langpack-nn
libreoffice-langpack-nr
libreoffice-langpack-sr
libreoffice-langpack-or
libreoffice-langpack-pa
libreoffice-langpack-pl
libreoffice-langpack-pt-BR
libreoffice-langpack-pt-PT
libreoffice-langpack-ro
libreoffice-langpack-ru
libreoffice-langpack-si
libreoffice-wiki-publisher
libreoffice-langpack-sl
autocorr-ru
autocorr-it
autocorr-ja
autocorr-ko
autocorr-lb
autocorr-lt
autocorr-mn
autocorr-nl
autocorr-pl
autocorr-pt
autocorr-ro
autocorr-is
autocorr-sk
autocorr-sl
autocorr-sr
autocorr-sv
autocorr-tr
autocorr-vi
autocorr-zh
libreoffice-data
libreoffice-opensymbol-fonts
libreoffice-ure-common
autocorr-da
libreoffice-langpack-ja
libreoffice-writer
libreoffice-x11
libreoffice-xsltfilter
libreofficekit
libreoffice-langpack-fi
autocorr-af
autocorr-bg
autocorr-ca
autocorr-cs
libreoffice-ure
autocorr-de
autocorr-el
autocorr-en
autocorr-es
autocorr-fa
autocorr-fi
autocorr-fr
autocorr-ga
autocorr-hr
autocorr-hu
libreoffice-help-id
libreoffice-help-et
libreoffice-help-eu
libreoffice-help-fi
libreoffice-help-fr
libreoffice-help-gl
libreoffice-help-gu
libreoffice-help-he
libreoffice-help-hi
libreoffice-help-hr
libreoffice-help-hu
libreoffice-help-es
libreoffice-help-it
libreoffice-help-ja
libreoffice-help-ko
libreoffice-help-lt
libreoffice-help-lv
libreoffice-help-nb
libreoffice-help-nl
libreoffice-help-nn
libreoffice-help-pl
libreoffice-help-pt-BR
libreoffice-help-ar
libreoffice
libreoffice-base
libreoffice-calc
libreoffice-core
libreoffice-draw
libreoffice-emailmerge
libreoffice-filters
libreoffice-gdb-debug-support
libreoffice-graphicfilter
libreoffice-gtk3
libreoffice-langpack-kk
libreoffice-help-bg
libreoffice-help-bn
libreoffice-help-ca
libreoffice-help-cs
libreoffice-help-da
libreoffice-help-de
libreoffice-help-dz
libreoffice-help-el
libreoffice-help-en
libreoffice-langpack-ga
libreoffice-langpack-da
libreoffice-langpack-de
libreoffice-langpack-dz
libreoffice-langpack-el
libreoffice-langpack-en
libreoffice-langpack-es
libreoffice-langpack-et
libreoffice-langpack-eu
libreoffice-langpack-fa
libreoffice-langpack-fr
libreoffice-help-ro
libreoffice-langpack-gl
libreoffice-langpack-gu
libreoffice-langpack-he
libreoffice-langpack-hi
libreoffice-langpack-hr
libreoffice-langpack-hu
libreoffice-langpack-id
libreoffice-langpack-it
libreoffice-langpack-kn
libreoffice-langpack-cs
libreoffice-help-pt-PT
libreoffice-help-ru
libreoffice-help-si
libreoffice-help-sk
libreoffice-help-sl
libreoffice-help-sv
libreoffice-help-ta
libreoffice-help-tr
libreoffice-help-uk
libreoffice-help-zh-Hans
libreoffice-help-zh-Hant
libreoffice-impress
libreoffice-langpack-af
libreoffice-langpack-ar
libreoffice-langpack-as
libreoffice-langpack-bg
libreoffice-langpack-bn
libreoffice-langpack-br
libreoffice-langpack-ca
libreoffice-langpack-cy

Install updates from vendor's website.

LibreOffice - update to 24.2.5.1
libreoffice (Red Hat package) - addressed in versions 6.0.6.1-22.el8_2, 6.4.7.2-17.el8_4
libreoffice (Ubuntu package) - addressed in versions 1:6.4.7-0ubuntu0.20.04.11, 1:7.3.7-0ubuntu0.22.04.6, 4:24.2.5-0ubuntu0.24.04.2
libreoffice (Debian package) - addressed in versions 1:7.0.4-4+deb11u10, 4:7.4.7-1+deb12u4
libreoffice-langpack-zh-Hans - update to 7.1.8.1-12.0.2
libreoffice-langpack-ss - update to 7.1.8.1-12.0.2
libreoffice-langpack-st - update to 7.1.8.1-12.0.2
libreoffice-langpack-sv - update to 7.1.8.1-12.0.2
libreoffice-langpack-ta - update to 7.1.8.1-12.0.2
libreoffice-langpack-te - update to 7.1.8.1-12.0.2
libreoffice-langpack-th - update to 7.1.8.1-12.0.2
libreoffice-langpack-tn - update to 7.1.8.1-12.0.2
libreoffice-langpack-tr - update to 7.1.8.1-12.0.2
libreoffice-langpack-ts - update to 7.1.8.1-12.0.2
libreoffice-langpack-uk - update to 7.1.8.1-12.0.2
libreoffice-langpack-ve - update to 7.1.8.1-12.0.2
libreoffice-langpack-xh - update to 7.1.8.1-12.0.2
libreoffice-langpack-sk - update to 7.1.8.1-12.0.2
libreoffice-langpack-zh-Hant - update to 7.1.8.1-12.0.2
libreoffice-langpack-zu - update to 7.1.8.1-12.0.2
libreoffice-math - update to 7.1.8.1-12.0.2
libreoffice-nlpsolver - update to 7.1.8.1-12.0.2
libreoffice-ogltrans - update to 7.1.8.1-12.0.2
libreoffice-pdfimport - update to 7.1.8.1-12.0.2
libreoffice-pyuno - update to 7.1.8.1-12.0.2
libreoffice-sdk - update to 7.1.8.1-12.0.2
libreoffice-langpack-nso - update to 7.1.8.1-12.0.2
libreoffice-langpack-ko - update to 7.1.8.1-12.0.2
libreoffice-langpack-lt - update to 7.1.8.1-12.0.2
libreoffice-langpack-lv - update to 7.1.8.1-12.0.2
libreoffice-langpack-mai - update to 7.1.8.1-12.0.2
libreoffice-langpack-ml - update to 7.1.8.1-12.0.2
libreoffice-langpack-mr - update to 7.1.8.1-12.0.2
libreoffice-langpack-nb - update to 7.1.8.1-12.0.2
libreoffice-langpack-nl - update to 7.1.8.1-12.0.2
libreoffice-langpack-nn - update to 7.1.8.1-12.0.2
libreoffice-langpack-nr - update to 7.1.8.1-12.0.2
libreoffice-langpack-sr - update to 7.1.8.1-12.0.2
libreoffice-langpack-or - update to 7.1.8.1-12.0.2
libreoffice-langpack-pa - update to 7.1.8.1-12.0.2
libreoffice-langpack-pl - update to 7.1.8.1-12.0.2
libreoffice-langpack-pt-BR - update to 7.1.8.1-12.0.2
libreoffice-langpack-pt-PT - update to 7.1.8.1-12.0.2
libreoffice-langpack-ro - update to 7.1.8.1-12.0.2
libreoffice-langpack-ru - update to 7.1.8.1-12.0.2
libreoffice-langpack-si - update to 7.1.8.1-12.0.2
libreoffice-wiki-publisher - update to 7.1.8.1-12.0.2
libreoffice-langpack-sl - update to 7.1.8.1-12.0.2
autocorr-ru - update to 7.1.8.1-12.0.2
autocorr-it - update to 7.1.8.1-12.0.2
autocorr-ja - update to 7.1.8.1-12.0.2
autocorr-ko - update to 7.1.8.1-12.0.2
autocorr-lb - update to 7.1.8.1-12.0.2
autocorr-lt - update to 7.1.8.1-12.0.2
autocorr-mn - update to 7.1.8.1-12.0.2
autocorr-nl - update to 7.1.8.1-12.0.2
autocorr-pl - update to 7.1.8.1-12.0.2
autocorr-pt - update to 7.1.8.1-12.0.2
autocorr-ro - update to 7.1.8.1-12.0.2
autocorr-is - update to 7.1.8.1-12.0.2
autocorr-sk - update to 7.1.8.1-12.0.2
autocorr-sl - update to 7.1.8.1-12.0.2
autocorr-sr - update to 7.1.8.1-12.0.2
autocorr-sv - update to 7.1.8.1-12.0.2
autocorr-tr - update to 7.1.8.1-12.0.2
autocorr-vi - update to 7.1.8.1-12.0.2
autocorr-zh - update to 7.1.8.1-12.0.2
libreoffice-data - update to 7.1.8.1-12.0.2
libreoffice-opensymbol-fonts - update to 7.1.8.1-12.0.2
libreoffice-ure-common - update to 7.1.8.1-12.0.2
autocorr-da - update to 7.1.8.1-12.0.2
libreoffice-langpack-ja - update to 7.1.8.1-12.0.2
libreoffice-writer - update to 7.1.8.1-12.0.2
libreoffice-x11 - update to 7.1.8.1-12.0.2
libreoffice-xsltfilter - update to 7.1.8.1-12.0.2
libreofficekit - update to 7.1.8.1-12.0.2
libreoffice-langpack-fi - update to 7.1.8.1-12.0.2
autocorr-af - update to 7.1.8.1-12.0.2
autocorr-bg - update to 7.1.8.1-12.0.2
autocorr-ca - update to 7.1.8.1-12.0.2
autocorr-cs - update to 7.1.8.1-12.0.2
libreoffice-ure - update to 7.1.8.1-12.0.2
autocorr-de - update to 7.1.8.1-12.0.2
autocorr-el - update to 7.1.8.1-12.0.2
autocorr-en - update to 7.1.8.1-12.0.2
autocorr-es - update to 7.1.8.1-12.0.2
autocorr-fa - update to 7.1.8.1-12.0.2
autocorr-fi - update to 7.1.8.1-12.0.2
autocorr-fr - update to 7.1.8.1-12.0.2
autocorr-ga - update to 7.1.8.1-12.0.2
autocorr-hr - update to 7.1.8.1-12.0.2
autocorr-hu - update to 7.1.8.1-12.0.2
libreoffice-help-id - update to 7.1.8.1-12.0.2
libreoffice-help-et - update to 7.1.8.1-12.0.2
libreoffice-help-eu - update to 7.1.8.1-12.0.2
libreoffice-help-fi - update to 7.1.8.1-12.0.2
libreoffice-help-fr - update to 7.1.8.1-12.0.2
libreoffice-help-gl - update to 7.1.8.1-12.0.2
libreoffice-help-gu - update to 7.1.8.1-12.0.2
libreoffice-help-he - update to 7.1.8.1-12.0.2
libreoffice-help-hi - update to 7.1.8.1-12.0.2
libreoffice-help-hr - update to 7.1.8.1-12.0.2
libreoffice-help-hu - update to 7.1.8.1-12.0.2
libreoffice-help-es - update to 7.1.8.1-12.0.2
libreoffice-help-it - update to 7.1.8.1-12.0.2
libreoffice-help-ja - update to 7.1.8.1-12.0.2
libreoffice-help-ko - update to 7.1.8.1-12.0.2
libreoffice-help-lt - update to 7.1.8.1-12.0.2
libreoffice-help-lv - update to 7.1.8.1-12.0.2
libreoffice-help-nb - update to 7.1.8.1-12.0.2
libreoffice-help-nl - update to 7.1.8.1-12.0.2
libreoffice-help-nn - update to 7.1.8.1-12.0.2
libreoffice-help-pl - update to 7.1.8.1-12.0.2
libreoffice-help-pt-BR - update to 7.1.8.1-12.0.2
libreoffice-help-ar - update to 7.1.8.1-12.0.2
libreoffice - update to 7.1.8.1-12.0.2
libreoffice-base - update to 7.1.8.1-12.0.2
libreoffice-calc - update to 7.1.8.1-12.0.2
libreoffice-core - update to 7.1.8.1-12.0.2
libreoffice-draw - update to 7.1.8.1-12.0.2
libreoffice-emailmerge - update to 7.1.8.1-12.0.2
libreoffice-filters - update to 7.1.8.1-12.0.2
libreoffice-gdb-debug-support - update to 7.1.8.1-12.0.2
libreoffice-graphicfilter - update to 7.1.8.1-12.0.2
libreoffice-gtk3 - update to 7.1.8.1-12.0.2
libreoffice-langpack-kk - update to 7.1.8.1-12.0.2
libreoffice-help-bg - update to 7.1.8.1-12.0.2
libreoffice-help-bn - update to 7.1.8.1-12.0.2
libreoffice-help-ca - update to 7.1.8.1-12.0.2
libreoffice-help-cs - update to 7.1.8.1-12.0.2
libreoffice-help-da - update to 7.1.8.1-12.0.2
libreoffice-help-de - update to 7.1.8.1-12.0.2
libreoffice-help-dz - update to 7.1.8.1-12.0.2
libreoffice-help-el - update to 7.1.8.1-12.0.2
libreoffice-help-en - update to 7.1.8.1-12.0.2
libreoffice-langpack-ga - update to 7.1.8.1-12.0.2
libreoffice-langpack-da - update to 7.1.8.1-12.0.2
libreoffice-langpack-de - update to 7.1.8.1-12.0.2
libreoffice-langpack-dz - update to 7.1.8.1-12.0.2
libreoffice-langpack-el - update to 7.1.8.1-12.0.2
libreoffice-langpack-en - update to 7.1.8.1-12.0.2
libreoffice-langpack-es - update to 7.1.8.1-12.0.2
libreoffice-langpack-et - update to 7.1.8.1-12.0.2
libreoffice-langpack-eu - update to 7.1.8.1-12.0.2
libreoffice-langpack-fa - update to 7.1.8.1-12.0.2
libreoffice-langpack-fr - update to 7.1.8.1-12.0.2
libreoffice-help-ro - update to 7.1.8.1-12.0.2
libreoffice-langpack-gl - update to 7.1.8.1-12.0.2
libreoffice-langpack-gu - update to 7.1.8.1-12.0.2
libreoffice-langpack-he - update to 7.1.8.1-12.0.2
libreoffice-langpack-hi - update to 7.1.8.1-12.0.2
libreoffice-langpack-hr - update to 7.1.8.1-12.0.2
libreoffice-langpack-hu - update to 7.1.8.1-12.0.2
libreoffice-langpack-id - update to 7.1.8.1-12.0.2
libreoffice-langpack-it - update to 7.1.8.1-12.0.2
libreoffice-langpack-kn - update to 7.1.8.1-12.0.2
libreoffice-langpack-cs - update to 7.1.8.1-12.0.2
libreoffice-help-pt-PT - update to 7.1.8.1-12.0.2
libreoffice-help-ru - update to 7.1.8.1-12.0.2
libreoffice-help-si - update to 7.1.8.1-12.0.2
libreoffice-help-sk - update to 7.1.8.1-12.0.2
libreoffice-help-sl - update to 7.1.8.1-12.0.2
libreoffice-help-sv - update to 7.1.8.1-12.0.2
libreoffice-help-ta - update to 7.1.8.1-12.0.2
libreoffice-help-tr - update to 7.1.8.1-12.0.2
libreoffice-help-uk - update to 7.1.8.1-12.0.2
libreoffice-help-zh-Hans - update to 7.1.8.1-12.0.2
libreoffice-help-zh-Hant - update to 7.1.8.1-12.0.2
libreoffice-impress - update to 7.1.8.1-12.0.2
libreoffice-langpack-af - update to 7.1.8.1-12.0.2
libreoffice-langpack-ar - update to 7.1.8.1-12.0.2
libreoffice-langpack-as - update to 7.1.8.1-12.0.2
libreoffice-langpack-bg - update to 7.1.8.1-12.0.2
libreoffice-langpack-bn - update to 7.1.8.1-12.0.2
libreoffice-langpack-br - update to 7.1.8.1-12.0.2
libreoffice-langpack-ca - update to 7.1.8.1-12.0.2
libreoffice-langpack-cy - update to 7.1.8.1-12.0.2

• https://www.libreoffice.org/about-us/security/advisories/CVE-2024-6472

• Improper certificate validation in LibreOffice
• Debian update for libreoffice
• Ubuntu update for libreoffice
• Red Hat Enterprise Linux 8 update for libreoffice
• Red Hat Enterprise Linux 8 update for libreoffice
• Anolis OS update for libreoffice