ALINUX2-SA-2024%3A0022

ALINUX2-SA-2024%3A0022 PUBLISHED CVSS 8.300000190734863 HIGH

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2023-6185: Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins. In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to run arbitrary gstreamer plugins depending on what plugins are installed on the target system.

Risk Scores

CVSS 3.1

8.300000190734863

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H

Affected Products

Vendor	Product	Versions
Alibaba Cloud	libreoffice

Timeline

Aug 7, 2024 CVE Published
Aug 7, 2024 CVE Updated

References

ALINUX2-SA-2024:0022: libreoffice security fix update (Important) advisory
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6185 advisory

Open in Interactive Console →