The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1598 advisory.

  - libreoffice: Remote resources protection module not applied to bullet graphics (CVE-2019-9849)

  - libreoffice: Insufficient URL validation allowing LibreLogo script execution (CVE-2019-9850)

  - libreoffice: LibreLogo global-event script execution (CVE-2019-9851)

  - libreoffice: Insufficient URL encoding flaw in allowed script location check (CVE-2019-9852)

  - libreoffice: Insufficient URL decoding flaw in categorizing macro location (CVE-2019-9853)

  - libreoffice: Unsafe URL assembly flaw in allowed script location check (CVE-2019-9854)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

CentOS 8 : libreoffice (CESA-2020:1598)

critical Nessus Plugin ID 146000

Version 1.4