Vulnerability · Published Feb 22, 2022 · Assigned by Document Fdn.

CVE-2021-25636Incorrect trust validation of signature with ambiguous KeyInfo children

High 7.5

In plain English

A high-severity security flaw in LibreOffice from The Document Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.0%top 38.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to create a digitally signed ODF document, by manipulating the documentsignatures.xml or macrosignatures.xml stream within the document to contain both "X509Data" and "KeyValue" children of the "KeyInfo" tag, which when opened caused LibreOffice to verify using the "KeyValue" but to report verification with the unrelated "X509Data" value. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.5.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8autocorr-af1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-bg1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-ca1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-cs1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-da1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-de1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-en1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-es1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-fa1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-fi1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-fr1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-ga1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-hr1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-hu1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-is1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-it1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-ja1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-ko1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-lb1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-lt1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-mn1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-nl1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-pl1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-pt1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-ro1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-ru1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-sk1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-sl1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-sr1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-sv1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-tr1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-vi1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8autocorr-zh1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-base1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-calc1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-core1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-data1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-draw1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-emailmerge1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-filters1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-gdb-debug-support1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-graphicfilter1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-gtk31:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-ar1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-bg1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-bn1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-ca1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-cs1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-da1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-de1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-dz1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-el1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-en1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-es1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-et1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-eu1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-fi1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-fr1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-gl1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-gu1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-he1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-hi1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-hr1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-hu1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-id1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-it1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-ja1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-ko1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-lt1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-lv1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-nb1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-nl1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-nn1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-pl1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-pt-BR1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-pt-PT1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-ro1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-ru1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-si1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-sk1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-sl1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-sv1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-ta1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-tr1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-uk1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-zh-Hans1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-help-zh-Hant1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-impress1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-af1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-ar1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-as1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-bg1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-bn1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-br1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-ca1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-cs1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-cy1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-da1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-de1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-dz1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-el1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-en1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-es1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-et1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-eu1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-fa1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-fi1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-fr1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-ga1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-gl1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-gu1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-he1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-hi1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-hr1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-hu1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-id1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-it1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-ja1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-kk1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-kn1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-ko1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-lt1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-lv1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-mai1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-ml1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-mr1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-nb1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-nl1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-nn1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-nr1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-nso1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-or1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-pa1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-pl1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-pt-BR1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-pt-PT1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-ro1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-ru1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-si1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-sk1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-sl1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-sr1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-ss1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-st1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-sv1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-ta1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-te1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-th1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-tn1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-tr1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-ts1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-uk1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-ve1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-xh1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-zh-Hans1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-zh-Hant1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-langpack-zu1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-math1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-ogltrans1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-opensymbol-fonts1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-pdfimport1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-pyuno1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-sdk1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-sdk-doc1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-ure1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-ure-common1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-wiki-publisher1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-writer1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-x111:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreoffice-xsltfilter1:6.4.7.2-11.el8.almaALSA-2022:7461
AlmaLinux:8libreofficekit1:6.4.7.2-11.el8.almaALSA-2022:7461
Alpine:v3.20libreoffice7.2.5.2-r0ALPINE-CVE-2021-25636
Alpine:v3.21libreoffice7.2.5.2-r0ALPINE-CVE-2021-25636
Alpine:v3.22libreoffice7.2.5.2-r0ALPINE-CVE-2021-25636
Alpine:v3.23libreoffice7.2.5.2-r0ALPINE-CVE-2021-25636
Alpine:v3.24libreoffice7.2.5.2-r0ALPINE-CVE-2021-25636
Debian:12libreoffice1:7.3.0-1DEBIAN-CVE-2021-25636
Debian:13libreoffice1:7.3.0-1DEBIAN-CVE-2021-25636
Debian:14libreoffice1:7.3.0-1DEBIAN-CVE-2021-25636
Rocky Linux:8libreoffice1:6.4.7.2-11.el8RLSA-2022:7461

Affected products (as reported)

VendorProductVersions
The Document Foundation LibreOffice 7.2 – before 7.2.5

Weakness: CWE-347

References