Vulnerabilities > CVE-2017-8358 - Out-of-bounds Write vulnerability in Libreoffice

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

libreoffice

CWE-787

critical

nessus

NVD

Published: 2017-04-30

Updated: 2017-05-20

Summary

LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx.

Vulnerable Configurations

Part	Description	Count
Application	Libreoffice Libreoffice Libreoffice - Libreoffice Libreoffice 3.2.99.2 Libreoffice Libreoffice 3.2.99.3 Libreoffice Libreoffice 3.3.0.1 Libreoffice Libreoffice 3.3.0.2 Libreoffice Libreoffice 3.3.0.3 Libreoffice Libreoffice 3.3.0.4 Libreoffice Libreoffice 3.3.1.1 Libreoffice Libreoffice 3.3.2.1 Libreoffice Libreoffice 3.3.3.1 Libreoffice Libreoffice 3.3.4.1 Libreoffice Libreoffice 3.3.99.1 Libreoffice Libreoffice 3.3.99.2 Libreoffice Libreoffice 3.3.99.3 Libreoffice Libreoffice 3.3.99.4 Libreoffice Libreoffice 3.3.99.5 Libreoffice Libreoffice 3.3.202 Libreoffice Libreoffice 3.4.0.1 Libreoffice Libreoffice 3.4.0.2 Libreoffice Libreoffice 3.4.1.1 Libreoffice Libreoffice 3.4.2.1 Libreoffice Libreoffice 3.4.2.2 Libreoffice Libreoffice 3.4.2.3 Libreoffice Libreoffice 3.4.6 Libreoffice Libreoffice 3.4.99.0 Libreoffice Libreoffice 3.4.99.1 Libreoffice Libreoffice 3.4.99.2 Libreoffice Libreoffice 3.4.99.3 Libreoffice Libreoffice 3.5.0 Libreoffice Libreoffice 3.5.0.0 Libreoffice Libreoffice 3.5.0.1 Libreoffice Libreoffice 3.5.0.2 Libreoffice Libreoffice 3.5.0.3 Libreoffice Libreoffice 3.5.1.1 Libreoffice Libreoffice 3.5.1.2 Libreoffice Libreoffice 3.5.2 Libreoffice Libreoffice 3.5.2.1 Libreoffice Libreoffice 3.5.2.2 Libreoffice Libreoffice 3.5.3.1 Libreoffice Libreoffice 3.5.3.2 Libreoffice Libreoffice 3.5.4.1 Libreoffice Libreoffice 3.5.4.2 Libreoffice Libreoffice 3.5.5.1 Libreoffice Libreoffice 3.5.5.2 Libreoffice Libreoffice 3.5.5.3 Libreoffice Libreoffice 3.5.6.1 Libreoffice Libreoffice 3.5.7.1 Libreoffice Libreoffice 3.5.7.2 Libreoffice Libreoffice 3.5.98.1 Libreoffice Libreoffice 3.5.99.1 Libreoffice Libreoffice 3.6.0.0 Libreoffice Libreoffice 3.6.0.1 Libreoffice Libreoffice 3.6.0.2 Libreoffice Libreoffice 3.6.0.3 Libreoffice Libreoffice 3.6.0.4 Libreoffice Libreoffice 3.6.1.2 Libreoffice Libreoffice 3.6.2.1 Libreoffice Libreoffice 3.6.2.2 Libreoffice Libreoffice 3.6.3.1 Libreoffice Libreoffice 3.6.3.2 Libreoffice Libreoffice 3.6.4.1 Libreoffice Libreoffice 3.6.4.2 Libreoffice Libreoffice 3.6.4.3 Libreoffice Libreoffice 3.6.5.1 Libreoffice Libreoffice 3.6.5.2 Libreoffice Libreoffice 3.6.6.1 Libreoffice Libreoffice 3.6.6.2 Libreoffice Libreoffice 3.6.7.1 Libreoffice Libreoffice 3.6.7.2 Libreoffice Libreoffice 4.0.0 Libreoffice Libreoffice 4.0.0.0 Libreoffice Libreoffice 4.0.0.1 Libreoffice Libreoffice 4.0.0.2 Libreoffice Libreoffice 4.0.0.3 Libreoffice Libreoffice 4.0.1 Libreoffice Libreoffice 4.0.1.1 Libreoffice Libreoffice 4.0.1.2 Libreoffice Libreoffice 4.0.2 Libreoffice Libreoffice 4.0.2.1 Libreoffice Libreoffice 4.0.2.2 Libreoffice Libreoffice 4.0.3 Libreoffice Libreoffice 4.0.3.1 Libreoffice Libreoffice 4.0.3.2 Libreoffice Libreoffice 4.0.3.3 Libreoffice Libreoffice 4.0.4.1 Libreoffice Libreoffice 4.0.4.2 Libreoffice Libreoffice 4.0.5.1 Libreoffice Libreoffice 4.0.5.2 Libreoffice Libreoffice 4.0.6.1 Libreoffice Libreoffice 4.0.6.2 Libreoffice Libreoffice 4.1.0 Libreoffice Libreoffice 4.1.0.0 Libreoffice Libreoffice 4.1.0.1 Libreoffice Libreoffice 4.1.0.2 Libreoffice Libreoffice 4.1.0.3 Libreoffice Libreoffice 4.1.0.4 Libreoffice Libreoffice 4.1.1 Libreoffice Libreoffice 4.1.1.1 Libreoffice Libreoffice 4.1.1.2 Libreoffice Libreoffice 4.1.2 Libreoffice Libreoffice 4.1.2.1 Libreoffice Libreoffice 4.1.2.2 Libreoffice Libreoffice 4.1.2.3 Libreoffice Libreoffice 4.1.3 Libreoffice Libreoffice 4.1.3.1 Libreoffice Libreoffice 4.1.3.2 Libreoffice Libreoffice 4.1.4 Libreoffice Libreoffice 4.1.4.1 Libreoffice Libreoffice 4.1.4.2 Libreoffice Libreoffice 4.1.5.1 Libreoffice Libreoffice 4.1.5.2 Libreoffice Libreoffice 4.1.5.3 Libreoffice Libreoffice 4.1.6.1 Libreoffice Libreoffice 4.1.6.2 Libreoffice Libreoffice 4.2.0 Libreoffice Libreoffice 4.2.0.0 Libreoffice Libreoffice 4.2.0.1 Libreoffice Libreoffice 4.2.0.2 Libreoffice Libreoffice 4.2.0.3 Libreoffice Libreoffice 4.2.0.4 Libreoffice Libreoffice 4.2.1 Libreoffice Libreoffice 4.2.1.1 Libreoffice Libreoffice 4.2.2 Libreoffice Libreoffice 4.2.2.1 Libreoffice Libreoffice 4.2.3 Libreoffice Libreoffice 4.2.3.1 Libreoffice Libreoffice 4.2.3.2 Libreoffice Libreoffice 4.2.3.3 Libreoffice Libreoffice 4.2.4 Libreoffice Libreoffice 4.2.4.1 Libreoffice Libreoffice 4.2.4.2 Libreoffice Libreoffice 4.2.5 Libreoffice Libreoffice 4.2.5.1 Libreoffice Libreoffice 4.2.5.2 Libreoffice Libreoffice 4.2.6 Libreoffice Libreoffice 4.2.6.1 Libreoffice Libreoffice 4.2.6.2 Libreoffice Libreoffice 4.2.6.3 Libreoffice Libreoffice 4.2.7.1 Libreoffice Libreoffice 4.2.7.2 Libreoffice Libreoffice 4.2.8.1 Libreoffice Libreoffice 4.2.8.2 Libreoffice Libreoffice 4.3.0 Libreoffice Libreoffice 4.3.0.0 Libreoffice Libreoffice 4.3.0.1 Libreoffice Libreoffice 4.3.0.2 Libreoffice Libreoffice 4.3.0.3 Libreoffice Libreoffice 4.3.0.4 Libreoffice Libreoffice 4.3.1 Libreoffice Libreoffice 4.3.1.1 Libreoffice Libreoffice 4.3.1.2 Libreoffice Libreoffice 4.3.2 Libreoffice Libreoffice 4.3.2.1 Libreoffice Libreoffice 4.3.2.2 Libreoffice Libreoffice 4.3.3.1 Libreoffice Libreoffice 4.3.3.2 Libreoffice Libreoffice 4.3.4 Libreoffice Libreoffice 4.3.4.1 Libreoffice Libreoffice 4.3.5 Libreoffice Libreoffice 4.3.5.1 Libreoffice Libreoffice 4.3.5.2 Libreoffice Libreoffice 4.3.6 Libreoffice Libreoffice 4.3.6.1 Libreoffice Libreoffice 4.3.6.2 Libreoffice Libreoffice 4.3.7.1 Libreoffice Libreoffice 4.3.7.2 Libreoffice Libreoffice 4.4.0 Libreoffice Libreoffice 4.4.0.0 Libreoffice Libreoffice 4.4.0.1 Libreoffice Libreoffice 4.4.0.2 Libreoffice Libreoffice 4.4.0.3 Libreoffice Libreoffice 4.4.1 Libreoffice Libreoffice 4.4.1.1 Libreoffice Libreoffice 4.4.1.2 Libreoffice Libreoffice 4.4.2.1 Libreoffice Libreoffice 4.4.2.2 Libreoffice Libreoffice 4.4.3.1 Libreoffice Libreoffice 4.4.3.2 Libreoffice Libreoffice 4.4.4 Libreoffice Libreoffice 4.4.4.1 Libreoffice Libreoffice 4.4.4.2 Libreoffice Libreoffice 4.4.4.3 Libreoffice Libreoffice 4.4.5 Libreoffice Libreoffice 4.4.5.1 Libreoffice Libreoffice 4.4.5.2 Libreoffice Libreoffice 4.4.5.3 Libreoffice Libreoffice 4.4.6.1 Libreoffice Libreoffice 4.4.6.2 Libreoffice Libreoffice 4.4.6.3 Libreoffice Libreoffice 4.4.7.1 Libreoffice Libreoffice 4.4.7.2 Libreoffice Libreoffice 5.0.0.0 Libreoffice Libreoffice 5.0.0.1 Libreoffice Libreoffice 5.0.0.2 Libreoffice Libreoffice 5.0.0.3 Libreoffice Libreoffice 5.0.0.4 Libreoffice Libreoffice 5.0.0.5 Libreoffice Libreoffice 5.0.1.1 Libreoffice Libreoffice 5.0.1.2 Libreoffice Libreoffice 5.0.2.1 Libreoffice Libreoffice 5.0.2.2 Libreoffice Libreoffice 5.0.3 Libreoffice Libreoffice 5.0.3.1 Libreoffice Libreoffice 5.0.3.2 Libreoffice Libreoffice 5.0.4 Libreoffice Libreoffice 5.0.4.1 Libreoffice Libreoffice 5.0.4.2 Libreoffice Libreoffice 5.0.5 Libreoffice Libreoffice 5.0.5.1 Libreoffice Libreoffice 5.0.5.2 Libreoffice Libreoffice 5.0.6.1 Libreoffice Libreoffice 5.0.6.2 Libreoffice Libreoffice 5.0.6.3 Libreoffice Libreoffice 5.1.0.0 Libreoffice Libreoffice 5.1.0.1 Libreoffice Libreoffice 5.1.0.2 Libreoffice Libreoffice 5.1.0.3 Libreoffice Libreoffice 5.1.1.1 Libreoffice Libreoffice 5.1.1.2 Libreoffice Libreoffice 5.1.1.3 Libreoffice Libreoffice 5.1.2.1 Libreoffice Libreoffice 5.1.2.2 Libreoffice Libreoffice 5.1.3.1 Libreoffice Libreoffice 5.1.3.2 Libreoffice Libreoffice 5.1.4.1 Libreoffice Libreoffice 5.1.4.2 Libreoffice Libreoffice 5.1.5.1 Libreoffice Libreoffice 5.1.5.2 Libreoffice Libreoffice 5.1.6.1 Libreoffice Libreoffice 5.1.6.2 Libreoffice Libreoffice 5.2.0.0 Libreoffice Libreoffice 5.2.0.1 Libreoffice Libreoffice 5.2.0.2 Libreoffice Libreoffice 5.2.0.3 Libreoffice Libreoffice 5.2.0.4 Libreoffice Libreoffice 5.2.1.1 Libreoffice Libreoffice 5.2.1.2 Libreoffice Libreoffice 5.2.2.1 Libreoffice Libreoffice 5.2.2.2 Libreoffice Libreoffice 5.2.3.1 Libreoffice Libreoffice 5.2.3.2 Libreoffice Libreoffice 5.2.3.3 Libreoffice Libreoffice 5.2.4.1 Libreoffice Libreoffice 5.2.4.2 Libreoffice Libreoffice 5.2.5.1 Libreoffice Libreoffice 5.2.6	276

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Nessus

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2017-2315-1.NASL
description	LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements: Writer : - New
last seen	2020-06-01
modified	2020-06-02
plugin id	102911
published	2017-09-01
reporter	This script is Copyright (C) 2017-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/102911
title	SUSE SLED12 Security Update : libreoffice (SUSE-SU-2017:2315-1)

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2017-807.NASL
description	LibreOffice was updated to version 5.3.3.2, bringing new features and enhancements : Writer : - New
last seen	2020-06-05
modified	2017-07-13
plugin id	101517
published	2017-07-13
reporter	This script is Copyright (C) 2017-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/101517
title	openSUSE Security Update : libreoffice (openSUSE-2017-807)

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2017-1821-1.NASL
description	LibreOffice was updated to version 5.3.3.2, bringing new features and enhancements: Writer : - New
last seen	2020-06-01
modified	2020-06-02
plugin id	101353
published	2017-07-10
reporter	This script is Copyright (C) 2017-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/101353
title	SUSE SLED12 Security Update : libreoffice (SUSE-SU-2017:1821-1)

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2017-1048.NASL
description	LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements : Writer : - New
last seen	2020-06-05
modified	2017-09-18
plugin id	103284
published	2017-09-18
reporter	This script is Copyright (C) 2017-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/103284
title	openSUSE Security Update : libreoffice (openSUSE-2017-1048)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Nessus

References