The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5574 advisory.

  - Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice     allows an attacker to execute arbitrary GStreamer plugins. In affected versions the filename of the     embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to run arbitrary     gstreamer plugins depending on what plugins are installed on the target system. (CVE-2023-6185)

  - Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to     execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro     or similar built-in command targets that can be executed when activated without warning the user.
    (CVE-2023-6186)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5574-1 : libreoffice - security update

high Nessus Plugin ID 186737

Version 1.9

Version 1.8

Version 1.7

Version 1.7

Version 1.6

Version 1.5

Version 1.3

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.9 May 17, 2024, 10:54 AM IAVM reference Plugin Feed: 202405171054
Version 1.8 Dec 20, 2023, 2:36 PM CVSSv3 score source (changed from "CVE-2023-6185" to none) Plugin Feed: 202312201436
Version 1.7 Dec 19, 2023, 8:16 PM CVSS metrics ("CVSSv3 score" set to 8.8. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2023-6185") Plugin Feed: 202312192016
Version 1.7 Dec 20, 2023, 12:39 PM CVSSv3 score source (changed from "CVE-2023-6185" to none) Plugin Feed: 202312201239
Version 1.6 Dec 18, 2023, 2:01 PM CVSS metrics ("CVSSv3 score" set to 8.3. "CVSSv3 vector" set to "CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H") CVSSv2 score source (changed from "CVE-2023-6185" to "CVE-2023-6186") Plugin Feed: 202312181401
Version 1.5 Dec 15, 2023, 2:39 PM CVSS metrics ("CVSSv2 score" set to 9.0. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C". "CVSSv3 score" set to 8.8. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv2 score source (changed from "CVE-2023-6186" to "CVE-2023-6185") IAVM reference Plugin Feed: 202312151439
Version 1.3 Dec 13, 2023, 4:19 PM CVSS metrics ("CVSSv2 score" set to 7.5. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P") Plugin Feed: 202312131619
Version 1.3 Dec 15, 2023, 12:19 PM IAVM reference Plugin Feed: 202312151219
Version 1.2 Dec 12, 2023, 5:15 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202312121715
Version 1.1 Dec 12, 2023, 10:59 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202312121059
Version 1.0 Dec 12, 2023, 6:07 AM New Plugin Feed: 202312120607