The remote Ubuntu 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6546-1 advisory.

    Reginaldo Silva discovered that LibreOffice incorrectly handled filenames when passing embedded videos to     GStreamer. If a user were tricked into opening a specially crafted file, a remote attacker could possibly     use this issue to execute arbitrary GStreamer plugins. (CVE-2023-6185)

    Reginaldo Silva discovered that LibreOffice incorrectly handled certain non-typical hyperlinks. If a user     were tricked into opening a specially crafted file, a remote attacker could possibly use this issue to     execute arbitrary scripts. (CVE-2023-6186)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 23.04 / 23.10 : LibreOffice vulnerabilities (USN-6546-1)

high Nessus Plugin ID 186719

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.2

Version 1.1

Version 1.0

Version 1.0

Version 1.9 Aug 28, 2024, 7:43 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408281943
Version 1.8 May 17, 2024, 10:54 AM IAVM reference Plugin Feed: 202405171054
Version 1.7 Dec 20, 2023, 2:36 PM CVSSv3 score source (changed from "CVE-2023-6185" to none) Plugin Feed: 202312201436
Version 1.6 Dec 19, 2023, 8:16 PM CVSS metrics ("CVSSv3 score" set to 8.8. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2023-6185") Plugin Feed: 202312192016
Version 1.6 Dec 20, 2023, 12:39 PM CVSSv3 score source (changed from "CVE-2023-6185" to none) Plugin Feed: 202312201239
Version 1.5 Dec 18, 2023, 2:01 PM CVSSv2 score source (changed from "CVE-2023-6185" to "CVE-2023-6186") CVSS metrics ("CVSSv3 score" set to 8.3. "CVSSv3 vector" set to "CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H") Plugin Feed: 202312181401
Version 1.4 Dec 15, 2023, 2:39 PM CVSS metrics ("CVSSv2 score" set to 9.0. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C". "CVSSv3 score" set to 8.8. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv2 score source (changed from "CVE-2023-6186" to "CVE-2023-6185") IAVM reference Plugin Feed: 202312151439
Version 1.2 Dec 13, 2023, 4:19 PM CVSS metrics ("CVSSv2 score" set to 7.5. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P") Plugin Feed: 202312131619
Version 1.2 Dec 15, 2023, 12:19 PM IAVM reference Plugin Feed: 202312151219
Version 1.1 Dec 12, 2023, 1:17 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202312120117
Version 1.0 Dec 11, 2023, 6:11 PM New Plugin Feed: 202312111811
Version 1.0 Dec 11, 2023, 11:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202312112312