CVEvulnerability
CVE-2019-9849
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-07-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Description
LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where bullet graphics were omitted from this protection prior to version 6.2.5. This issue affects: Document Foundation LibreOffice versions prior to 6.2.5.
Affected configurations
• libreoffice libreoffice (< 6.2.5)
• canonical ubuntu linux 16.04
• canonical ubuntu linux 18.04
• canonical ubuntu linux 19.04
• fedoraproject fedora 29
• fedoraproject fedora 30
• debian debian linux 8.0
• opensuse leap 15.0
• opensuse leap 15.1
References
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/109374 Broken Link
- https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMEGUWMWORC3DOVEHVXLFT3A5RSCMLBH/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XPTZJCNN52VNGSVC5DFKVW3EDMRDWKMP/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/201908-13 Third Party Advisory
- https://usn.ubuntu.com/4063-1/ Third Party Advisory
- https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9849 Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/109374 Broken Link
- https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMEGUWMWORC3DOVEHVXLFT3A5RSCMLBH/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XPTZJCNN52VNGSVC5DFKVW3EDMRDWKMP/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/201908-13 Third Party Advisory
- https://usn.ubuntu.com/4063-1/ Third Party Advisory
- https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9849 Vendor Advisory