Bug 2254003 (CVE-2023-6185) - CVE-2023-6185 libreoffice: Improper Input Validation leading to arbitrary gstreamer plugin execution
Summary: CVE-2023-6185 libreoffice: Improper Input Validation leading to arbitrary gst...
Keywords:
Status: NEW
Alias: CVE-2023-6185
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2254004
Blocks: 2254007
TreeView+ depends on / blocked
 
Reported: 2023-12-11 13:41 UTC by ybuenos
Modified: 2024-03-26 12:14 UTC (History)
2 users (show)

Fixed In Version: LibreOffice 7.5.9, LibreOffice 7.6.4
Doc Type: If docs needed, set a value
Doc Text:
An improper input validation vulnerability was found in LibreOffice. In versions where filenames are not sufficiently escaped, an attacker can execute arbitrary GStreamer plugins.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2024:1480 0 None None None 2024-03-25 17:40:04 UTC
Red Hat Product Errata RHSA-2024:1512 0 None None None 2024-03-26 11:44:37 UTC
Red Hat Product Errata RHSA-2024:1513 0 None None None 2024-03-26 12:14:45 UTC
Red Hat Product Errata RHSA-2024:1514 0 None None None 2024-03-26 12:14:15 UTC

Description ybuenos 2023-12-11 13:41:06 UTC 
Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins.

In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to run arbitrary gstreamer plugins depending on what plugins are installed on the target system.

https://www.libreoffice.org/about-us/security/advisories/cve-2023-6185
Comment 1 ybuenos 2023-12-11 13:41:20 UTC 
Created libreoffice tracking bugs for this issue:

Affects: fedora-all [bug 2254004]
Comment 11 errata-xmlrpc 2024-03-25 17:40:03 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Via RHSA-2024:1480 https://access.redhat.com/errata/RHSA-2024:1480
Comment 12 errata-xmlrpc 2024-03-26 11:44:36 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support
  Red Hat Enterprise Linux 8.2 Telecommunications Update Service
  Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions

Via RHSA-2024:1512 https://access.redhat.com/errata/RHSA-2024:1512
Comment 13 errata-xmlrpc 2024-03-26 12:14:14 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:1514 https://access.redhat.com/errata/RHSA-2024:1514
Comment 14 errata-xmlrpc 2024-03-26 12:14:45 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:1513 https://access.redhat.com/errata/RHSA-2024:1513
Note You need to log in before you can comment on or make changes to this bug.