CVE-2018-6871: canonical ubuntu_linux

CVSS: 9.8v3.0CriticalModified

AliasesSUSE-SU-2018:0428-1SUSE-SU-2018:0443-1RHSA-2018:0418+6 more

Published 09-02-2018Last modified 05-08-2024

Vulnerability summary

CVE-2018-6871 is a critical (CVSS 9.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 22.80% chance of exploitation in the next 30 days, higher than 97.7% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.0 (NVD)

EPSS score

22.80%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2github, exploit-database

Advisory lineage

Upstream 0 · Downstream 2 · Duplicates 1 · Related 1

MGASA-2018-0271 SUSE-SU-2018:1076-1 CVE-2018-1055

Timeline

09-02-2018
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.

CVSS metrics

5 scores · 4 sources · 2 versions

v3.09.8v2.05.0

EPSS trend

Probability

22.80%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 22.80% on 20-09-2026

20-09-202620-10-2026

EPSS score

22.80%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

githubUnverified
Libreoffice Remote Arbitrary File Disclosure
Maturity: poc
exploit-databaseremotelinuxUnverified
LibreOffice < 6.0.1 - '=WEBSERVICE' Remote Arbitrary File Disclosure
Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat141 products

enterprise_linux_desktop6.0 | 7.0
enterprise_linux_server6.0 | 7.0
enterprise_linux_server_aus7.4 | 7.6
enterprise_linux_server_eus7.4 | 7.5 | 7.6
enterprise_linux_server_tus7.4 | 7.6

enterprise_linux_workstation6.0 | 7.0
autocorr-af< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-bg< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-ca< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-cs< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-da< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-de< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-en< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-es< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-fa< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-fi< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-fr< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-ga< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-hr< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-hu< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-is< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-it< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-ja< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-ko< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-lb< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-lt< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-mn< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-nl< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-pl< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-pt< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-ro< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-ru< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-sk< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-sl< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-sr< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-sv< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-tr< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-vi< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
autocorr-zh< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-base< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-bsh< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-calc< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-core< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-debuginfo< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-draw< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-emailmerge< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-filters< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-gdb-debug-support< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-glade< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-graphicfilter< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-headless< 1:4.3.7.2-2.el6_9.2
libreoffice-impress< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-af< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-ar< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-as< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-bg< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-bn< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-br< 1:5.0.6.2-15.el7_4
libreoffice-langpack-ca< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-cs< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-cy< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-da< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-de< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-dz< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-el< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-en< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-es< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-et< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-eu< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-fa< 1:5.0.6.2-15.el7_4
libreoffice-langpack-fi< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-fr< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-ga< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-gl< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-gu< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-he< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-hi< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-hr< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-hu< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-it< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-ja< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-kk< 1:5.0.6.2-15.el7_4
libreoffice-langpack-kn< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-ko< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-lt< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-lv< 1:5.0.6.2-15.el7_4
libreoffice-langpack-mai< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-ml< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-mr< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-ms< 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-nb< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-nl< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-nn< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-nr< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-nso< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-or< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-pa< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-pl< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-pt-BR< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-pt-PT< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-ro< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-ru< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-si< 1:5.0.6.2-15.el7_4
libreoffice-langpack-sk< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-sl< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-sr< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-ss< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-st< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-sv< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-ta< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-te< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-th< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-tn< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-tr< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-ts< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-uk< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-ur< 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-ve< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-xh< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-zh-Hans< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-zh-Hant< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-langpack-zu< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-librelogo< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-math< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-nlpsolver< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-officebean< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-ogltrans< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-opensymbol-fonts< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-pdfimport< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-postgresql< 1:5.0.6.2-15.el7_4
libreoffice-pyuno< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-rhino< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-sdk< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-sdk-doc< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-ure< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-wiki-publisher< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-writer< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreoffice-xsltfilter< 1:5.0.6.2-15.el7_4 | < 1:4.3.7.2-2.el6_9.2
libreofficekit< 1:5.0.6.2-15.el7_4
libreofficekit-devel< 1:5.0.6.2-15.el7_4

Show all 141

Suse6 products

libreoffice&distro=SUSE Linux Enterprise Desktop 12 SP2< 5.4.5.1-40.24.1
libreoffice&distro=SUSE Linux Enterprise Desktop 12 SP3< 5.4.5.1-43.19.1
libreoffice&distro=SUSE Linux Enterprise Software Development Kit 12 SP2< 5.4.5.1-40.24.1
libreoffice&distro=SUSE Linux Enterprise Software Development Kit 12 SP3< 5.4.5.1-43.19.1
libreoffice&distro=SUSE Linux Enterprise Workstation Extension 12 SP2< 5.4.5.1-40.24.1

Show all 6

Debian2 products

libreoffice< 1:6.0.1-1 | < 1:5.2.7-1+deb9u2 | < 1:4.3.3-2+deb8u10
debian_linuxEOL9.0

Canonical1 product

ubuntu_linuxEOL14.04 | 16.04 | 17.10

Libreoffice1 product

libreoffice< 5.4.5 | 6.0.0 | 6.0.0:alpha1 | 6.0.0:beta1 | 6.0.0:beta2

Ubuntu1 product

libreoffice< 1:4.2.8-0ubuntu5.3 | < 1:5.1.6~rc2-0ubuntu1~xenial3

6 vendors · 152 products

References

23 links

www.exploit-db.com/exploits/44022/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
usn.ubuntu.com/3579-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
github.com/jollheef/libreoffice-remote-arbitrary-file-disclosureX Refsource MISCExploitThird Party AdvisoryARTICLEREPORT
access.redhat.com/errata/RHSA-2018:0517Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
cgit.freedesktop.org/libreoffice/…X Refsource CONFIRMPatchThird Party Advisory
access.redhat.com/errata/RHSA-2018:0418Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.libreoffice.org/about-us/security/advisories/cve-2018-1055/X Refsource CONFIRMVendor AdvisoryARTICLE
www.debian.org/security/2018/dsa-4111Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.suse.com/support/update/announcement/2018/suse-su-20180428-1/Advisory
bugzilla.suse.com/1080249REPORT

Show all 23 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities