Vulnerability · Published Oct 11, 2021 · Assigned by Document Fdn.

CVE-2021-25633Content Manipulation with Double Certificate Attack

High 7.5

In plain English

A high-severity improper certificate validation in LibreOffice from The Document Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.7%top 45.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to create a digitally signed ODF document, by manipulating the documentsignatures.xml or macrosignatures.xml stream within the document to combine multiple certificate data, which when opened caused LibreOffice to display a validly signed indicator but whose content was unrelated to the signature shown. This issue affects: The Document Foundation LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8autocorr-af1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-bg1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ca1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-cs1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-da1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-de1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-en1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-es1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-fa1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-fi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-fr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ga1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-hr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-hu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-is1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-it1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ja1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ko1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-lb1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-lt1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-mn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-nl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-pl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-pt1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ro1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ru1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-sk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-sl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-sr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-sv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-tr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-vi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-zh1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-base1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-calc1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-core1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-data1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-draw1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-emailmerge1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-filters1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-gdb-debug-support1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-graphicfilter1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-gtk31:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ar1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-bg1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-bn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ca1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-cs1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-da1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-de1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-dz1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-el1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-en1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-es1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-et1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-eu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-fi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-fr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-gl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-gu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-he1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-hi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-hr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-hu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-id1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-it1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ja1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ko1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-lt1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-lv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-nb1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-nl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-nn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-pl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-pt-BR1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-pt-PT1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ro1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ru1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-si1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-sk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-sl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-sv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ta1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-tr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-uk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-zh-Hans1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-zh-Hant1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-impress1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-af1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ar1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-as1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-bg1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-bn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-br1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ca1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-cs1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-cy1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-da1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-de1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-dz1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-el1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-en1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-es1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-et1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-eu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-fa1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-fi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-fr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ga1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-gl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-gu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-he1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-hi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-hr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-hu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-id1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-it1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ja1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-kk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-kn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ko1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-lt1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-lv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-mai1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ml1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-mr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nb1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nso1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-or1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-pa1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-pl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-pt-BR1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-pt-PT1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ro1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ru1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-si1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-sk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-sl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-sr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ss1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-st1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-sv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ta1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-te1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-th1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-tn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-tr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ts1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-uk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ve1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-xh1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-zh-Hans1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-zh-Hant1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-zu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-math1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-ogltrans1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-opensymbol-fonts1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-pdfimport1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-pyuno1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-sdk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-sdk-doc1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-ure1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-ure-common1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-wiki-publisher1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-writer1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-x111:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-xsltfilter1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreofficekit1:6.4.7.2-10.el8.almaALSA-2022:1766
Alpine:v3.20libreoffice7.2.2.2-r0ALPINE-CVE-2021-25633
Alpine:v3.21libreoffice7.2.2.2-r0ALPINE-CVE-2021-25633
Alpine:v3.22libreoffice7.2.2.2-r0ALPINE-CVE-2021-25633
Alpine:v3.23libreoffice7.2.2.2-r0ALPINE-CVE-2021-25633
Alpine:v3.24libreoffice7.2.2.2-r0ALPINE-CVE-2021-25633
Debian:12libreoffice1:7.2.0-2DEBIAN-CVE-2021-25633
Debian:13libreoffice1:7.2.0-2DEBIAN-CVE-2021-25633
Debian:14libreoffice1:7.2.0-2DEBIAN-CVE-2021-25633
Rocky Linux:8libreoffice1:6.4.7.2-10.el8RLSA-2022:1766

Affected products (as reported)

VendorProductVersions
The Document Foundation LibreOffice 7-0 – before 7.0.67-1 – before 7.1.2

Weakness: CWE-295

References