CVE-2021-25636: fedoraproject fedora

CVSS: 7.5v3.1HighModified

AliasesSUSE-SU-2022:0886-1SUSE-SU-2022:1093-1RHSA-2022:7461+4 more

Published 22-02-2022Last modified 03-08-2024

Vulnerability summary

CVE-2021-25636 is a high (CVSS 7.5) vulnerability in fedoraproject fedora. EPSS estimates a 0.95% chance of exploitation in the next 30 days, higher than 60.7% of scored vulnerabilities.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (NVD)

EPSS score

0.95%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1

DLA-3368-1

Timeline

22-02-2022
PublishedVulnerability first disclosed.
03-08-2024
Last modifiedVulnerability information updated.

Description

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to create a digitally signed ODF document, by manipulating the documentsignatures.xml or macrosignatures.xml stream within the document to contain both "X509Data" and "KeyValue" children of the "KeyInfo" tag, which when opened caused LibreOffice to verify using the "KeyValue" but to report verification with the unrelated "X509Data" value. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.5.

CVSS metrics

5 scores · 4 sources · 2 versions

v3.17.5v2.05.0

EPSS trend

Probability

0.95%

Chance of exploitation in the next 30 days

Percentile

61%

Versus all other CVEs

30-day change

0.00 pp

From 0.95% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.95%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat191 products

autocorr-af< 1:6.4.7.2-11.el8
autocorr-bg< 1:6.4.7.2-11.el8
autocorr-ca< 1:6.4.7.2-11.el8
autocorr-cs< 1:6.4.7.2-11.el8
autocorr-da< 1:6.4.7.2-11.el8

autocorr-de< 1:6.4.7.2-11.el8
autocorr-en< 1:6.4.7.2-11.el8
autocorr-es< 1:6.4.7.2-11.el8
autocorr-fa< 1:6.4.7.2-11.el8
autocorr-fi< 1:6.4.7.2-11.el8
autocorr-fr< 1:6.4.7.2-11.el8
autocorr-ga< 1:6.4.7.2-11.el8
autocorr-hr< 1:6.4.7.2-11.el8
autocorr-hu< 1:6.4.7.2-11.el8
autocorr-is< 1:6.4.7.2-11.el8
autocorr-it< 1:6.4.7.2-11.el8
autocorr-ja< 1:6.4.7.2-11.el8
autocorr-ko< 1:6.4.7.2-11.el8
autocorr-lb< 1:6.4.7.2-11.el8
autocorr-lt< 1:6.4.7.2-11.el8
autocorr-mn< 1:6.4.7.2-11.el8
autocorr-nl< 1:6.4.7.2-11.el8
autocorr-pl< 1:6.4.7.2-11.el8
autocorr-pt< 1:6.4.7.2-11.el8
autocorr-ro< 1:6.4.7.2-11.el8
autocorr-ru< 1:6.4.7.2-11.el8
autocorr-sk< 1:6.4.7.2-11.el8
autocorr-sl< 1:6.4.7.2-11.el8
autocorr-sr< 1:6.4.7.2-11.el8
autocorr-sv< 1:6.4.7.2-11.el8
autocorr-tr< 1:6.4.7.2-11.el8
autocorr-vi< 1:6.4.7.2-11.el8
autocorr-zh< 1:6.4.7.2-11.el8
libreoffice< 1:6.4.7.2-11.el8
libreoffice-base< 1:6.4.7.2-11.el8
libreoffice-base-debuginfo< 1:6.4.7.2-11.el8
libreoffice-calc< 1:6.4.7.2-11.el8
libreoffice-calc-debuginfo< 1:6.4.7.2-11.el8
libreoffice-core< 1:6.4.7.2-11.el8
libreoffice-core-debuginfo< 1:6.4.7.2-11.el8
libreoffice-data< 1:6.4.7.2-11.el8
libreoffice-debuginfo< 1:6.4.7.2-11.el8
libreoffice-debugsource< 1:6.4.7.2-11.el8
libreoffice-draw< 1:6.4.7.2-11.el8
libreoffice-emailmerge< 1:6.4.7.2-11.el8
libreoffice-filters< 1:6.4.7.2-11.el8
libreoffice-gdb-debug-support< 1:6.4.7.2-11.el8
libreoffice-glade-debuginfo< 1:6.4.7.2-11.el8
libreoffice-graphicfilter< 1:6.4.7.2-11.el8
libreoffice-graphicfilter-debuginfo< 1:6.4.7.2-11.el8
libreoffice-gtk3< 1:6.4.7.2-11.el8
libreoffice-gtk3-debuginfo< 1:6.4.7.2-11.el8
libreoffice-help-ar< 1:6.4.7.2-11.el8
libreoffice-help-bg< 1:6.4.7.2-11.el8
libreoffice-help-bn< 1:6.4.7.2-11.el8
libreoffice-help-ca< 1:6.4.7.2-11.el8
libreoffice-help-cs< 1:6.4.7.2-11.el8
libreoffice-help-da< 1:6.4.7.2-11.el8
libreoffice-help-de< 1:6.4.7.2-11.el8
libreoffice-help-dz< 1:6.4.7.2-11.el8
libreoffice-help-el< 1:6.4.7.2-11.el8
libreoffice-help-en< 1:6.4.7.2-11.el8
libreoffice-help-es< 1:6.4.7.2-11.el8
libreoffice-help-et< 1:6.4.7.2-11.el8
libreoffice-help-eu< 1:6.4.7.2-11.el8
libreoffice-help-fi< 1:6.4.7.2-11.el8
libreoffice-help-fr< 1:6.4.7.2-11.el8
libreoffice-help-gl< 1:6.4.7.2-11.el8
libreoffice-help-gu< 1:6.4.7.2-11.el8
libreoffice-help-he< 1:6.4.7.2-11.el8
libreoffice-help-hi< 1:6.4.7.2-11.el8
libreoffice-help-hr< 1:6.4.7.2-11.el8
libreoffice-help-hu< 1:6.4.7.2-11.el8
libreoffice-help-id< 1:6.4.7.2-11.el8
libreoffice-help-it< 1:6.4.7.2-11.el8
libreoffice-help-ja< 1:6.4.7.2-11.el8
libreoffice-help-ko< 1:6.4.7.2-11.el8
libreoffice-help-lt< 1:6.4.7.2-11.el8
libreoffice-help-lv< 1:6.4.7.2-11.el8
libreoffice-help-nb< 1:6.4.7.2-11.el8
libreoffice-help-nl< 1:6.4.7.2-11.el8
libreoffice-help-nn< 1:6.4.7.2-11.el8
libreoffice-help-pl< 1:6.4.7.2-11.el8
libreoffice-help-pt-BR< 1:6.4.7.2-11.el8
libreoffice-help-pt-PT< 1:6.4.7.2-11.el8
libreoffice-help-ro< 1:6.4.7.2-11.el8
libreoffice-help-ru< 1:6.4.7.2-11.el8
libreoffice-help-si< 1:6.4.7.2-11.el8
libreoffice-help-sk< 1:6.4.7.2-11.el8
libreoffice-help-sl< 1:6.4.7.2-11.el8
libreoffice-help-sv< 1:6.4.7.2-11.el8
libreoffice-help-ta< 1:6.4.7.2-11.el8
libreoffice-help-tr< 1:6.4.7.2-11.el8
libreoffice-help-uk< 1:6.4.7.2-11.el8
libreoffice-help-zh-Hans< 1:6.4.7.2-11.el8
libreoffice-help-zh-Hant< 1:6.4.7.2-11.el8
libreoffice-impress< 1:6.4.7.2-11.el8
libreoffice-impress-debuginfo< 1:6.4.7.2-11.el8
libreoffice-langpack-af< 1:6.4.7.2-11.el8
libreoffice-langpack-ar< 1:6.4.7.2-11.el8
libreoffice-langpack-as< 1:6.4.7.2-11.el8
libreoffice-langpack-bg< 1:6.4.7.2-11.el8
libreoffice-langpack-bn< 1:6.4.7.2-11.el8
libreoffice-langpack-br< 1:6.4.7.2-11.el8
libreoffice-langpack-ca< 1:6.4.7.2-11.el8
libreoffice-langpack-cs< 1:6.4.7.2-11.el8
libreoffice-langpack-cy< 1:6.4.7.2-11.el8
libreoffice-langpack-da< 1:6.4.7.2-11.el8
libreoffice-langpack-de< 1:6.4.7.2-11.el8
libreoffice-langpack-dz< 1:6.4.7.2-11.el8
libreoffice-langpack-el< 1:6.4.7.2-11.el8
libreoffice-langpack-en< 1:6.4.7.2-11.el8
libreoffice-langpack-es< 1:6.4.7.2-11.el8
libreoffice-langpack-et< 1:6.4.7.2-11.el8
libreoffice-langpack-eu< 1:6.4.7.2-11.el8
libreoffice-langpack-fa< 1:6.4.7.2-11.el8
libreoffice-langpack-fi< 1:6.4.7.2-11.el8
libreoffice-langpack-fr< 1:6.4.7.2-11.el8
libreoffice-langpack-ga< 1:6.4.7.2-11.el8
libreoffice-langpack-gl< 1:6.4.7.2-11.el8
libreoffice-langpack-gu< 1:6.4.7.2-11.el8
libreoffice-langpack-he< 1:6.4.7.2-11.el8
libreoffice-langpack-hi< 1:6.4.7.2-11.el8
libreoffice-langpack-hr< 1:6.4.7.2-11.el8
libreoffice-langpack-hu< 1:6.4.7.2-11.el8
libreoffice-langpack-id< 1:6.4.7.2-11.el8
libreoffice-langpack-it< 1:6.4.7.2-11.el8
libreoffice-langpack-ja< 1:6.4.7.2-11.el8
libreoffice-langpack-kk< 1:6.4.7.2-11.el8
libreoffice-langpack-kn< 1:6.4.7.2-11.el8
libreoffice-langpack-ko< 1:6.4.7.2-11.el8
libreoffice-langpack-lt< 1:6.4.7.2-11.el8
libreoffice-langpack-lv< 1:6.4.7.2-11.el8
libreoffice-langpack-mai< 1:6.4.7.2-11.el8
libreoffice-langpack-ml< 1:6.4.7.2-11.el8
libreoffice-langpack-mr< 1:6.4.7.2-11.el8
libreoffice-langpack-nb< 1:6.4.7.2-11.el8
libreoffice-langpack-nl< 1:6.4.7.2-11.el8
libreoffice-langpack-nn< 1:6.4.7.2-11.el8
libreoffice-langpack-nr< 1:6.4.7.2-11.el8
libreoffice-langpack-nso< 1:6.4.7.2-11.el8
libreoffice-langpack-or< 1:6.4.7.2-11.el8
libreoffice-langpack-pa< 1:6.4.7.2-11.el8
libreoffice-langpack-pl< 1:6.4.7.2-11.el8
libreoffice-langpack-pt-BR< 1:6.4.7.2-11.el8
libreoffice-langpack-pt-PT< 1:6.4.7.2-11.el8
libreoffice-langpack-ro< 1:6.4.7.2-11.el8
libreoffice-langpack-ru< 1:6.4.7.2-11.el8
libreoffice-langpack-si< 1:6.4.7.2-11.el8
libreoffice-langpack-sk< 1:6.4.7.2-11.el8
libreoffice-langpack-sl< 1:6.4.7.2-11.el8
libreoffice-langpack-sr< 1:6.4.7.2-11.el8
libreoffice-langpack-ss< 1:6.4.7.2-11.el8
libreoffice-langpack-st< 1:6.4.7.2-11.el8
libreoffice-langpack-sv< 1:6.4.7.2-11.el8
libreoffice-langpack-ta< 1:6.4.7.2-11.el8
libreoffice-langpack-te< 1:6.4.7.2-11.el8
libreoffice-langpack-th< 1:6.4.7.2-11.el8
libreoffice-langpack-tn< 1:6.4.7.2-11.el8
libreoffice-langpack-tr< 1:6.4.7.2-11.el8
libreoffice-langpack-ts< 1:6.4.7.2-11.el8
libreoffice-langpack-uk< 1:6.4.7.2-11.el8
libreoffice-langpack-ve< 1:6.4.7.2-11.el8
libreoffice-langpack-xh< 1:6.4.7.2-11.el8
libreoffice-langpack-zh-Hans< 1:6.4.7.2-11.el8
libreoffice-langpack-zh-Hant< 1:6.4.7.2-11.el8
libreoffice-langpack-zu< 1:6.4.7.2-11.el8
libreoffice-math< 1:6.4.7.2-11.el8
libreoffice-officebean-debuginfo< 1:6.4.7.2-11.el8
libreoffice-ogltrans< 1:6.4.7.2-11.el8
libreoffice-ogltrans-debuginfo< 1:6.4.7.2-11.el8
libreoffice-opensymbol-fonts< 1:6.4.7.2-11.el8
libreoffice-pdfimport< 1:6.4.7.2-11.el8
libreoffice-pdfimport-debuginfo< 1:6.4.7.2-11.el8
libreoffice-postgresql-debuginfo< 1:6.4.7.2-11.el8
libreoffice-pyuno< 1:6.4.7.2-11.el8
libreoffice-pyuno-debuginfo< 1:6.4.7.2-11.el8
libreoffice-sdk< 1:6.4.7.2-11.el8
libreoffice-sdk-debuginfo< 1:6.4.7.2-11.el8
libreoffice-sdk-doc< 1:6.4.7.2-11.el8
libreoffice-ure< 1:6.4.7.2-11.el8
libreoffice-ure-common< 1:6.4.7.2-11.el8
libreoffice-ure-debuginfo< 1:6.4.7.2-11.el8
libreoffice-wiki-publisher< 1:6.4.7.2-11.el8
libreoffice-writer< 1:6.4.7.2-11.el8
libreoffice-writer-debuginfo< 1:6.4.7.2-11.el8
libreoffice-x11< 1:6.4.7.2-11.el8
libreoffice-x11-debuginfo< 1:6.4.7.2-11.el8
libreoffice-xsltfilter< 1:6.4.7.2-11.el8
libreofficekit< 1:6.4.7.2-11.el8
libreofficekit-debuginfo< 1:6.4.7.2-11.el8

Show all 191

Suse4 products

libreoffice&distro=SUSE Linux Enterprise Module for Package Hub 15 SP3< 7.2.5.1-150300.14.22.18.3
libreoffice&distro=SUSE Linux Enterprise Software Development Kit 12 SP5< 7.2.5.1-48.19.4
libreoffice&distro=SUSE Linux Enterprise Workstation Extension 12 SP5< 7.2.5.1-48.19.4
libreoffice&distro=SUSE Linux Enterprise Workstation Extension 15 SP3< 7.2.5.1-150300.14.22.18.3

Debian1 product

libreoffice< 1:7.3.0-1

Fedoraproject1 product

fedoraEOL34

Libreoffice1 product

libreoffice≥ 7.2.0, < 7.2.5

Opensuse1 product

libreoffice&distro=openSUSE Leap 15.3< 7.2.5.1-150300.14.22.18.3

Ubuntu1 product

libreoffice< 1:6.0.7-0ubuntu0.18.04.11 | < 1:6.4.7-0ubuntu0.20.04.4

7 vendors · 200 products · Showing 200 of 201. Use Open JSON for the complete list.

References

21 links

www.libreoffice.org/about-us/security/advisories/CVE-2021-25636/Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.debian.org/debian-lts-announce/2023/03/msg00022.htmlMailing List
www.suse.com/support/update/announcement/2022/suse-su-20220886-1/Advisory
bugzilla.suse.com/1196456REPORT
www.suse.com/security/cve/CVE-2021-25636WEB
www.suse.com/support/update/announcement/2022/suse-su-20221093-1/Advisory
access.redhat.com/errata/RHSA-2022:7461Advisory
access.redhat.com/security/updates/classification/ARTICLE
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/indexARTICLE

Show all 21 references

bugzilla.redhat.com/show_bug.cgi?id=2056955REPORT
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7461.jsonAdvisory
access.redhat.com/security/cve/CVE-2021-25636REPORT
www.cve.org/CVERecord?id=CVE-2021-25636AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2021-25636Advisory
www.libreoffice.org/about-us/security/advisories/cve-2021-25636/ARTICLE
ubuntu.com/security/CVE-2021-25636REPORT
www.libreoffice.org/about-us/security/advisories/CVE-2021-25636REPORT
ubuntu.com/security/notices/USN-5330-1Advisory
security-tracker.debian.org/tracker/CVE-2021-25636Advisory
lists.opensuse.org/archives/…Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities