Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

Untriaged
Filter by:
With package: libreoffice-qt6-fresh

Found 1 matching suggestions

View:
Compact
Detailed
Permalink CVE-2023-1183
5.0 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): REQUIRED
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): HIGH
  • Availability impact (A): NONE
created 1 year, 2 months ago
Arbitrary file write

A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.

References

Affected products

libreoffice
  • ==7.4.6
  • ==7.5.1

Matching in nixpkgs

pkgs.libreoffice-bin

Comprehensive, professional-quality productivity suite, a variant of openoffice.org

pkgs.hyphenDicts.de_AT

Hyphen dictionary for German (Austria) from LibreOffice

  • nixos-unstable 24.8
    • nixpkgs-unstable 24.8
    • nixos-unstable-small 24.8

pkgs.hyphenDicts.de_CH

Hyphen dictionary for German (Switzerland) from LibreOffice

  • nixos-unstable 24.8
    • nixpkgs-unstable 24.8
    • nixos-unstable-small 24.8

pkgs.hyphenDicts.de_DE

Hyphen dictionary for German (Germany) from LibreOffice

  • nixos-unstable 24.8
    • nixpkgs-unstable 24.8
    • nixos-unstable-small 24.8

Package maintainers