Vulnerability · Published Oct 12, 2021 · Assigned by Document Fdn.

CVE-2021-25634Timestamp Manipulation with Signature Wrapping

High 7.5

In plain English

A high-severity improper certificate validation in LibreOffice from The Document Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.7%top 46.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to modify a digitally signed ODF document to insert an additional signing time timestamp which LibreOffice would incorrectly present as a valid signature signed at the bogus signing time. This issue affects: The Document Foundation LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8autocorr-af1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-bg1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ca1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-cs1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-da1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-de1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-en1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-es1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-fa1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-fi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-fr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ga1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-hr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-hu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-is1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-it1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ja1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ko1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-lb1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-lt1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-mn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-nl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-pl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-pt1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ro1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ru1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-sk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-sl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-sr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-sv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-tr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-vi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-zh1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-base1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-calc1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-core1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-data1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-draw1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-emailmerge1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-filters1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-gdb-debug-support1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-graphicfilter1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-gtk31:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ar1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-bg1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-bn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ca1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-cs1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-da1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-de1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-dz1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-el1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-en1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-es1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-et1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-eu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-fi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-fr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-gl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-gu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-he1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-hi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-hr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-hu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-id1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-it1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ja1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ko1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-lt1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-lv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-nb1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-nl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-nn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-pl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-pt-BR1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-pt-PT1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ro1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ru1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-si1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-sk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-sl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-sv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ta1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-tr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-uk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-zh-Hans1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-zh-Hant1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-impress1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-af1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ar1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-as1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-bg1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-bn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-br1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ca1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-cs1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-cy1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-da1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-de1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-dz1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-el1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-en1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-es1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-et1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-eu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-fa1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-fi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-fr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ga1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-gl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-gu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-he1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-hi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-hr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-hu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-id1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-it1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ja1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-kk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-kn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ko1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-lt1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-lv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-mai1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ml1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-mr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nb1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nso1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-or1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-pa1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-pl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-pt-BR1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-pt-PT1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ro1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ru1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-si1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-sk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-sl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-sr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ss1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-st1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-sv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ta1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-te1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-th1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-tn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-tr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ts1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-uk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ve1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-xh1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-zh-Hans1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-zh-Hant1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-zu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-math1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-ogltrans1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-opensymbol-fonts1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-pdfimport1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-pyuno1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-sdk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-sdk-doc1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-ure1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-ure-common1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-wiki-publisher1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-writer1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-x111:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-xsltfilter1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreofficekit1:6.4.7.2-10.el8.almaALSA-2022:1766
Alpine:v3.20libreoffice7.2.2.2-r0ALPINE-CVE-2021-25634
Alpine:v3.21libreoffice7.2.2.2-r0ALPINE-CVE-2021-25634
Alpine:v3.22libreoffice7.2.2.2-r0ALPINE-CVE-2021-25634
Alpine:v3.23libreoffice7.2.2.2-r0ALPINE-CVE-2021-25634
Alpine:v3.24libreoffice7.2.2.2-r0ALPINE-CVE-2021-25634
Debian:12libreoffice1:7.2.0-2DEBIAN-CVE-2021-25634
Debian:13libreoffice1:7.2.0-2DEBIAN-CVE-2021-25634
Debian:14libreoffice1:7.2.0-2DEBIAN-CVE-2021-25634
Rocky Linux:8libreoffice1:6.4.7.2-10.el8RLSA-2022:1766

Affected products (as reported)

VendorProductVersions
The Document Foundation LibreOffice 7-0 – before 7.0.67-1 – before 7.1.2

Weakness: CWE-295

References