The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3304 advisory.

    - Fix CVE-2022-38745 Empty entry in Java class path
    - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
    - Fix CVE-2023-1183 libreoffice: Arbitrary File Write

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : libreoffice (ELSA-2024-3304)

high Nessus Plugin ID 197893

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Nov 2, 2024, 5:10 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202411020510
Version 1.2 Sep 22, 2024, 3:24 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202409220324
Version 1.1 May 24, 2024, 5:36 PM New Plugin Feed: 202405241736