Insecure Default Initialization of Resource Affecting libreoffice-help-si package, versions <1:6.4.7.2-15.0.1.el8
Threat Intelligence
EPSS
0.07% (31st
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-ORACLE8-LIBREOFFICEHELPSI-6080917
- published 23 Nov 2023
- disclosed 24 Mar 2023
How to fix?
Upgrade Oracle:8 libreoffice-help-si to version 1:6.4.7.2-15.0.1.el8 or higher.
This issue was patched in ELSA-2023-6933.
NVD Description
Note: Versions mentioned in the description apply only to the upstream libreoffice-help-si package and not the libreoffice-help-si package as distributed by Oracle.
See How to fix? for Oracle:8 relevant fixed versions and status.
Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.
CVSS Scores
version 3.1