The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1598 advisory.

  - libreoffice: Remote resources protection module not applied to bullet graphics (CVE-2019-9849)

  - libreoffice: Insufficient URL validation allowing LibreLogo script execution (CVE-2019-9850)

  - libreoffice: LibreLogo global-event script execution (CVE-2019-9851)

  - libreoffice: Insufficient URL encoding flaw in allowed script location check (CVE-2019-9852)

  - libreoffice: Insufficient URL decoding flaw in categorizing macro location (CVE-2019-9853)

  - libreoffice: Unsafe URL assembly flaw in allowed script location check (CVE-2019-9854)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

CentOS 8 : libreoffice (CESA-2020:1598)

critical Nessus Plugin ID 146000

Version 1.5

Version 1.4

Version 1.5 Feb 20, 2025, 9:15 AM Exploit attributes ("Exploit framework metasploit" set to "True") Plugin Feed: 202502200915
Version 1.4 Jan 18, 2023, 4:10 PM CVSSv2 score source (changed from "CVE-2019-9852" to "CVE-2019-9851") CVSSv3 score source (set to "CVE-2019-9851") Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202301181610