The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5252 advisory.

  - LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint     server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected     versions of LibreOffice links using that scheme could be constructed to call internal macros with     arbitrary arguments. Which when clicked on, or activated by document events, could result in arbitrary     script execution without warning. This issue affects: The Document Foundation LibreOffice 7.4 versions     prior to 7.4.1; 7.3 versions prior to 7.3.6. (CVE-2022-3140)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5252-1 : libreoffice - security update

medium Nessus Plugin ID 166093

Version 1.5

Version 1.3

Version 1.2

Version 1.5 Jun 1, 2023, 2:11 PM IAVM reference Plugin Feed: 202306011411
Version 1.3 Oct 14, 2022, 9:50 AM STIG Severity IAVM reference Plugin Feed: 202210140950
Version 1.2 Oct 13, 2022, 7:46 AM New Plugin Feed: 202210130746