CVE-2017-14226: libreoffice Out-of-bounds Read
Vulnerability summary
CVE-2017-14226 is a high (CVSS 7.5) Out-of-bounds Read vulnerability in libreoffice. EPSS estimates a 2.48% chance of exploitation in the next 30 days, higher than 84.3% of scored vulnerabilities.
Timeline
- 09-09-2017PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the WPXTableList class in WPXTable.cpp). This vulnerability can be triggered in LibreOffice before 5.3.7. It may lead to suffering a remote attack against a LibreOffice application.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
2.48%
Chance of exploitation in the next 30 days
Percentile
84%
Versus all other CVEs
30-day change
0.00 pp
From 2.48% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse6 products
- libwpd&distro=SUSE Linux Enterprise Desktop 12 SP2< 0.10.2-2.4.1
- libwpd&distro=SUSE Linux Enterprise Desktop 12 SP3< 0.10.2-2.4.1
- libwpd&distro=SUSE Linux Enterprise Software Development Kit 12 SP2< 0.10.2-2.4.1
- libwpd&distro=SUSE Linux Enterprise Software Development Kit 12 SP3< 0.10.2-2.4.1
- libwpd&distro=SUSE Linux Enterprise Workstation Extension 12 SP2< 0.10.2-2.4.1
Mageia2 products
- libwpd< 0.10.2-1.mga5
- libwpd< 0.10.2-1.mga6
Debian1 product
- libwpd< 0.10.2-1
Libreoffice1 product
- libreoffice≤ 5.3.6
Libwpd1 product
- libwpd0.10.1
Ubuntu1 product
- libwpdAll versions (No fix recorded)
6 vendors · 12 products
References
15 links- sourceforge.net/p/libwpd/code/ci/f40827b3eae260ce657c67d9fecc855b09dea3c3/X Refsource MISCPatchThird Party Advisory
- sourceforge.net/p/libwpd/code/ci/0329a9c57f9b3b0efa0f09a5235dfd90236803a5/X Refsource MISCPatchThird Party Advisory
- bugs.documentfoundation.org/show_bug.cgi?id=112269X Refsource MISCIssue TrackingThird Party Advisory
- cgit.freedesktop.org/libreoffice/core/commit/?id=dd89afa6ee8166b69e7a1e86f22616ca8fc122c9X Refsource MISCMailing ListThird Party Advisory
