CVE-2023-6185: debian debian_linux

CVSS: 8.8v3.1HighModified

AliasesRHSA-2024:3304UBUNTU-CVE-2023-6185DEBIAN-CVE-2023-6185

Published 11-12-2023Last modified 13-02-2025

Vulnerability summary

CVE-2023-6185 is a high (CVSS 8.8) vulnerability in debian debian_linux. EPSS estimates a 1.02% chance of exploitation in the next 30 days, higher than 62.7% of scored vulnerabilities.

Overall risk

35/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.8/10

010

High · v3.1 (NVD)

EPSS score

1.02%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 15 · Related 4

DLA-3703-1 DSA-5574-1 MGASA-2024-0116 RHSA-2024:1423 RHSA-2024:1425 RHSA-2024:1427+10 more

Timeline

11-12-2023
PublishedVulnerability first disclosed.
13-02-2025
Last modifiedVulnerability information updated.

Description

Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins. In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to run arbitrary gstreamer plugins depending on what plugins are installed on the target system.

CVSS metrics

5 scores · 5 sources · 1 version

v3.18.8

EPSS trend

Probability

1.02%

Chance of exploitation in the next 30 days

Percentile

63%

Versus all other CVEs

30-day change

0.00 pp

From 1.02% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.02%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat182 products

autocorr-af< 1:5.3.6.1-26.el7_9
autocorr-bg< 1:5.3.6.1-26.el7_9
autocorr-ca< 1:5.3.6.1-26.el7_9
autocorr-cs< 1:5.3.6.1-26.el7_9
autocorr-da< 1:5.3.6.1-26.el7_9

autocorr-de< 1:5.3.6.1-26.el7_9
autocorr-en< 1:5.3.6.1-26.el7_9
autocorr-es< 1:5.3.6.1-26.el7_9
autocorr-fa< 1:5.3.6.1-26.el7_9
autocorr-fi< 1:5.3.6.1-26.el7_9
autocorr-fr< 1:5.3.6.1-26.el7_9
autocorr-ga< 1:5.3.6.1-26.el7_9
autocorr-hr< 1:5.3.6.1-26.el7_9
autocorr-hu< 1:5.3.6.1-26.el7_9
autocorr-is< 1:5.3.6.1-26.el7_9
autocorr-it< 1:5.3.6.1-26.el7_9
autocorr-ja< 1:5.3.6.1-26.el7_9
autocorr-ko< 1:5.3.6.1-26.el7_9
autocorr-lb< 1:5.3.6.1-26.el7_9
autocorr-lt< 1:5.3.6.1-26.el7_9
autocorr-mn< 1:5.3.6.1-26.el7_9
autocorr-nl< 1:5.3.6.1-26.el7_9
autocorr-pl< 1:5.3.6.1-26.el7_9
autocorr-pt< 1:5.3.6.1-26.el7_9
autocorr-ro< 1:5.3.6.1-26.el7_9
autocorr-ru< 1:5.3.6.1-26.el7_9
autocorr-sk< 1:5.3.6.1-26.el7_9
autocorr-sl< 1:5.3.6.1-26.el7_9
autocorr-sr< 1:5.3.6.1-26.el7_9
autocorr-sv< 1:5.3.6.1-26.el7_9
autocorr-tr< 1:5.3.6.1-26.el7_9
autocorr-vi< 1:5.3.6.1-26.el7_9
autocorr-zh< 1:5.3.6.1-26.el7_9
libreoffice< 1:5.3.6.1-26.el7_9
libreoffice-base< 1:5.3.6.1-26.el7_9
libreoffice-bsh< 1:5.3.6.1-26.el7_9
libreoffice-calc< 1:5.3.6.1-26.el7_9
libreoffice-core< 1:5.3.6.1-26.el7_9
libreoffice-data< 1:5.3.6.1-26.el7_9
libreoffice-debuginfo< 1:5.3.6.1-26.el7_9
libreoffice-draw< 1:5.3.6.1-26.el7_9
libreoffice-emailmerge< 1:5.3.6.1-26.el7_9
libreoffice-filters< 1:5.3.6.1-26.el7_9
libreoffice-gdb-debug-support< 1:5.3.6.1-26.el7_9
libreoffice-glade< 1:5.3.6.1-26.el7_9
libreoffice-graphicfilter< 1:5.3.6.1-26.el7_9
libreoffice-gtk2< 1:5.3.6.1-26.el7_9
libreoffice-gtk3< 1:5.3.6.1-26.el7_9
libreoffice-help-ar< 1:5.3.6.1-26.el7_9
libreoffice-help-bg< 1:5.3.6.1-26.el7_9
libreoffice-help-bn< 1:5.3.6.1-26.el7_9
libreoffice-help-ca< 1:5.3.6.1-26.el7_9
libreoffice-help-cs< 1:5.3.6.1-26.el7_9
libreoffice-help-da< 1:5.3.6.1-26.el7_9
libreoffice-help-de< 1:5.3.6.1-26.el7_9
libreoffice-help-dz< 1:5.3.6.1-26.el7_9
libreoffice-help-el< 1:5.3.6.1-26.el7_9
libreoffice-help-es< 1:5.3.6.1-26.el7_9
libreoffice-help-et< 1:5.3.6.1-26.el7_9
libreoffice-help-eu< 1:5.3.6.1-26.el7_9
libreoffice-help-fi< 1:5.3.6.1-26.el7_9
libreoffice-help-fr< 1:5.3.6.1-26.el7_9
libreoffice-help-gl< 1:5.3.6.1-26.el7_9
libreoffice-help-gu< 1:5.3.6.1-26.el7_9
libreoffice-help-he< 1:5.3.6.1-26.el7_9
libreoffice-help-hi< 1:5.3.6.1-26.el7_9
libreoffice-help-hr< 1:5.3.6.1-26.el7_9
libreoffice-help-hu< 1:5.3.6.1-26.el7_9
libreoffice-help-id< 1:5.3.6.1-26.el7_9
libreoffice-help-it< 1:5.3.6.1-26.el7_9
libreoffice-help-ja< 1:5.3.6.1-26.el7_9
libreoffice-help-ko< 1:5.3.6.1-26.el7_9
libreoffice-help-lt< 1:5.3.6.1-26.el7_9
libreoffice-help-lv< 1:5.3.6.1-26.el7_9
libreoffice-help-nb< 1:5.3.6.1-26.el7_9
libreoffice-help-nl< 1:5.3.6.1-26.el7_9
libreoffice-help-nn< 1:5.3.6.1-26.el7_9
libreoffice-help-pl< 1:5.3.6.1-26.el7_9
libreoffice-help-pt-BR< 1:5.3.6.1-26.el7_9
libreoffice-help-pt-PT< 1:5.3.6.1-26.el7_9
libreoffice-help-ro< 1:5.3.6.1-26.el7_9
libreoffice-help-ru< 1:5.3.6.1-26.el7_9
libreoffice-help-si< 1:5.3.6.1-26.el7_9
libreoffice-help-sk< 1:5.3.6.1-26.el7_9
libreoffice-help-sl< 1:5.3.6.1-26.el7_9
libreoffice-help-sv< 1:5.3.6.1-26.el7_9
libreoffice-help-ta< 1:5.3.6.1-26.el7_9
libreoffice-help-tr< 1:5.3.6.1-26.el7_9
libreoffice-help-uk< 1:5.3.6.1-26.el7_9
libreoffice-help-zh-Hans< 1:5.3.6.1-26.el7_9
libreoffice-help-zh-Hant< 1:5.3.6.1-26.el7_9
libreoffice-impress< 1:5.3.6.1-26.el7_9
libreoffice-langpack-af< 1:5.3.6.1-26.el7_9
libreoffice-langpack-ar< 1:5.3.6.1-26.el7_9
libreoffice-langpack-as< 1:5.3.6.1-26.el7_9
libreoffice-langpack-bg< 1:5.3.6.1-26.el7_9
libreoffice-langpack-bn< 1:5.3.6.1-26.el7_9
libreoffice-langpack-br< 1:5.3.6.1-26.el7_9
libreoffice-langpack-ca< 1:5.3.6.1-26.el7_9
libreoffice-langpack-cs< 1:5.3.6.1-26.el7_9
libreoffice-langpack-cy< 1:5.3.6.1-26.el7_9
libreoffice-langpack-da< 1:5.3.6.1-26.el7_9
libreoffice-langpack-de< 1:5.3.6.1-26.el7_9
libreoffice-langpack-dz< 1:5.3.6.1-26.el7_9
libreoffice-langpack-el< 1:5.3.6.1-26.el7_9
libreoffice-langpack-en< 1:5.3.6.1-26.el7_9
libreoffice-langpack-es< 1:5.3.6.1-26.el7_9
libreoffice-langpack-et< 1:5.3.6.1-26.el7_9
libreoffice-langpack-eu< 1:5.3.6.1-26.el7_9
libreoffice-langpack-fa< 1:5.3.6.1-26.el7_9
libreoffice-langpack-fi< 1:5.3.6.1-26.el7_9
libreoffice-langpack-fr< 1:5.3.6.1-26.el7_9
libreoffice-langpack-ga< 1:5.3.6.1-26.el7_9
libreoffice-langpack-gl< 1:5.3.6.1-26.el7_9
libreoffice-langpack-gu< 1:5.3.6.1-26.el7_9
libreoffice-langpack-he< 1:5.3.6.1-26.el7_9
libreoffice-langpack-hi< 1:5.3.6.1-26.el7_9
libreoffice-langpack-hr< 1:5.3.6.1-26.el7_9
libreoffice-langpack-hu< 1:5.3.6.1-26.el7_9
libreoffice-langpack-id< 1:5.3.6.1-26.el7_9
libreoffice-langpack-it< 1:5.3.6.1-26.el7_9
libreoffice-langpack-ja< 1:5.3.6.1-26.el7_9
libreoffice-langpack-kk< 1:5.3.6.1-26.el7_9
libreoffice-langpack-kn< 1:5.3.6.1-26.el7_9
libreoffice-langpack-ko< 1:5.3.6.1-26.el7_9
libreoffice-langpack-lt< 1:5.3.6.1-26.el7_9
libreoffice-langpack-lv< 1:5.3.6.1-26.el7_9
libreoffice-langpack-mai< 1:5.3.6.1-26.el7_9
libreoffice-langpack-ml< 1:5.3.6.1-26.el7_9
libreoffice-langpack-mr< 1:5.3.6.1-26.el7_9
libreoffice-langpack-nb< 1:5.3.6.1-26.el7_9
libreoffice-langpack-nl< 1:5.3.6.1-26.el7_9
libreoffice-langpack-nn< 1:5.3.6.1-26.el7_9
libreoffice-langpack-nr< 1:5.3.6.1-26.el7_9
libreoffice-langpack-nso< 1:5.3.6.1-26.el7_9
libreoffice-langpack-or< 1:5.3.6.1-26.el7_9
libreoffice-langpack-pa< 1:5.3.6.1-26.el7_9
libreoffice-langpack-pl< 1:5.3.6.1-26.el7_9
libreoffice-langpack-pt-BR< 1:5.3.6.1-26.el7_9
libreoffice-langpack-pt-PT< 1:5.3.6.1-26.el7_9
libreoffice-langpack-ro< 1:5.3.6.1-26.el7_9
libreoffice-langpack-ru< 1:5.3.6.1-26.el7_9
libreoffice-langpack-si< 1:5.3.6.1-26.el7_9
libreoffice-langpack-sk< 1:5.3.6.1-26.el7_9
libreoffice-langpack-sl< 1:5.3.6.1-26.el7_9
libreoffice-langpack-sr< 1:5.3.6.1-26.el7_9
libreoffice-langpack-ss< 1:5.3.6.1-26.el7_9
libreoffice-langpack-st< 1:5.3.6.1-26.el7_9
libreoffice-langpack-sv< 1:5.3.6.1-26.el7_9
libreoffice-langpack-ta< 1:5.3.6.1-26.el7_9
libreoffice-langpack-te< 1:5.3.6.1-26.el7_9
libreoffice-langpack-th< 1:5.3.6.1-26.el7_9
libreoffice-langpack-tn< 1:5.3.6.1-26.el7_9
libreoffice-langpack-tr< 1:5.3.6.1-26.el7_9
libreoffice-langpack-ts< 1:5.3.6.1-26.el7_9
libreoffice-langpack-uk< 1:5.3.6.1-26.el7_9
libreoffice-langpack-ve< 1:5.3.6.1-26.el7_9
libreoffice-langpack-xh< 1:5.3.6.1-26.el7_9
libreoffice-langpack-zh-Hans< 1:5.3.6.1-26.el7_9
libreoffice-langpack-zh-Hant< 1:5.3.6.1-26.el7_9
libreoffice-langpack-zu< 1:5.3.6.1-26.el7_9
libreoffice-librelogo< 1:5.3.6.1-26.el7_9
libreoffice-math< 1:5.3.6.1-26.el7_9
libreoffice-nlpsolver< 1:5.3.6.1-26.el7_9
libreoffice-officebean< 1:5.3.6.1-26.el7_9
libreoffice-officebean-common< 1:5.3.6.1-26.el7_9
libreoffice-ogltrans< 1:5.3.6.1-26.el7_9
libreoffice-opensymbol-fonts< 1:5.3.6.1-26.el7_9
libreoffice-pdfimport< 1:5.3.6.1-26.el7_9
libreoffice-postgresql< 1:5.3.6.1-26.el7_9
libreoffice-pyuno< 1:5.3.6.1-26.el7_9
libreoffice-rhino< 1:5.3.6.1-26.el7_9
libreoffice-sdk< 1:5.3.6.1-26.el7_9
libreoffice-sdk-doc< 1:5.3.6.1-26.el7_9
libreoffice-ure< 1:5.3.6.1-26.el7_9
libreoffice-ure-common< 1:5.3.6.1-26.el7_9
libreoffice-wiki-publisher< 1:5.3.6.1-26.el7_9
libreoffice-writer< 1:5.3.6.1-26.el7_9
libreoffice-x11< 1:5.3.6.1-26.el7_9
libreoffice-xsltfilter< 1:5.3.6.1-26.el7_9
libreofficekit< 1:5.3.6.1-26.el7_9
libreofficekit-devel< 1:5.3.6.1-26.el7_9

Show all 182

Debian2 products

libreoffice< 4:7.4.7-1+deb12u1 | < 4:7.6.3-1
debian_linuxEOL11.0 | 12.0

Fedoraproject1 product

fedoraEOL38

Libreoffice1 product

libreoffice≥ 7.5.0, < 7.5.9 | ≥ 7.6.0, < 7.6.3

The document foundation1 product

libreoffice≥ 7.5, < 7.5.9 | ≥ 7.6, < 7.6.3

Ubuntu1 product

libreoffice< 1:6.4.7-0ubuntu0.20.04.9 | < 1:7.3.7-0ubuntu0.22.04.4

6 vendors · 188 products

References

16 links

www.libreoffice.org/about-us/security/advisories/cve-2023-6185Vendor AdvisoryARTICLE
www.debian.org/security/2023/dsa-5574Third Party Advisory
lists.fedoraproject.org/archives/…Mailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2023/12/msg00026.html
access.redhat.com/errata/RHSA-2024:3304Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2254003REPORT
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3304.jsonAdvisory
access.redhat.com/security/cve/CVE-2023-6185REPORT
www.cve.org/CVERecord?id=CVE-2023-6185AdvisoryREPORT

Show all 16 references

nvd.nist.gov/vuln/detail/CVE-2023-6185Advisory
ubuntu.com/security/CVE-2023-6185REPORT
www.libreoffice.org/about-us/security/advisories/cve-2023-6185/REPORT
ubuntu.com/security/notices/USN-6546-1Advisory
ubuntu.com/security/notices/USN-6546-2Advisory
security-tracker.debian.org/tracker/CVE-2023-6185Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities