CVE-2014-3693

Опубликовано: 07 нояб. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to TCP port 1599.

Комментарий

CWE-416: Use After Free

Ссылки

http://lists.opensuse.org/opensuse-updates/2014-11/msg00049.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0377.html
Third Party Advisory
http://secunia.com/advisories/62111
http://secunia.com/advisories/62132
http://secunia.com/advisories/62396
http://www.securityfocus.com/bid/71351
http://www.ubuntu.com/usn/USN-2398-1
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201603-05
https://www.libreoffice.org/about-us/security/advisories/CVE-2014-3693/
Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2014-11/msg00049.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0377.html
Third Party Advisory
http://secunia.com/advisories/62111
http://secunia.com/advisories/62132
http://secunia.com/advisories/62396
http://www.securityfocus.com/bid/71351
http://www.ubuntu.com/usn/USN-2398-1
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201603-05
https://www.libreoffice.org/about-us/security/advisories/CVE-2014-3693/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:libreoffice:libreoffice:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.0.3.3:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.0.4.2:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.1.0:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.1.1:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.1.2:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.1.3:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.1.4:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.2.0:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.2.1:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.2.2:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.2.3:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.2.4:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.2.5:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.2.6:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.3.0:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.3.1:*:*:*:*:*:*:*

cpe:2.3:a:libreoffice:libreoffice:4.3.2:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05364

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2014-3693

ubuntu

около 11 лет назад

CVE-2014-3693

redhat

около 11 лет назад

CVE-2014-3693

debian

около 11 лет назад

Use-after-free vulnerability in the socket manager of Impress Remote i ...

GHSA-2cc9-9pjp-x968

github

больше 3 лет назад

ELSA-2015-0377

oracle-oval

больше 10 лет назад

ELSA-2015-0377: libreoffice security, bug fix, and enhancement update (MODERATE)

EPSS

Процентиль: 90%

0.05364

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other