The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7228-1 advisory.

    Thomas Rinsma discovered that LibreOffice incorrectly handled paths when processing embedded font files.
    If a user or automated system were tricked into opening a specially crafted LibreOffice file, a remote     attacker could possibly use this issue to create arbitrary files ending with .ttf. (CVE-2024-12425)

    Thomas Rinsma discovered that LibreOffice incorrectly handled certain environment variables and INI file     values. If a user or automated system were tricked into opening a specially crafted LibreOffice file, a     remote attacker could possibly use this issue to exfiltrate sensitive information. (CVE-2024-12426)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : LibreOffice vulnerabilities (USN-7228-1)

medium Nessus Plugin ID 214671

Version 1.1