Vulnerability · Published Jul 25, 2022 · Assigned by Document Fdn.

CVE-2022-26306Execution of Untrusted Macros Due to Improper Certificate Validation

High 7.5

In plain English

A high-severity security flaw in LibreOffice from The Document Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.1%top 33.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where the required initialization vector for encryption was always the same which weakens the security of the encryption making them vulnerable if an attacker has access to the user's configuration data. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions prior to 7.3.1.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8autocorr-af1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-af1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-bg1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-bg1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-ca1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-ca1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-cs1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-cs1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-da1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-da1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-de1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-de1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:9autocorr-dsb1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:9autocorr-el1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-en1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-en1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-es1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-es1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-fa1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-fa1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-fi1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-fi1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-fr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-fr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-ga1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-ga1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-hr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-hr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:9autocorr-hsb1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-hu1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-hu1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-is1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-is1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-it1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-it1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-ja1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-ja1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-ko1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-ko1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-lb1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-lb1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-lt1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-lt1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-mn1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-mn1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-nl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-nl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-pl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-pl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-pt1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-pt1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-ro1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-ro1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-ru1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-ru1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-sk1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-sk1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-sl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-sl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-sr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-sr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-sv1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-sv1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-tr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-tr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-vi1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-vi1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:9autocorr-vro1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-zh1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-zh1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-base1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-base1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-calc1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-calc1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-core1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-core1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-data1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-data1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-draw1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-draw1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-emailmerge1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-emailmerge1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-filters1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-filters1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-gdb-debug-support1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-gdb-debug-support1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-graphicfilter1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-graphicfilter1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-gtk31:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-gtk31:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ar1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ar1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-bg1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-bg1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-bn1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-bn1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ca1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ca1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-cs1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-cs1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-da1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-da1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-de1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-de1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-dz1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-dz1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-el1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-el1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-en1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-en1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:9libreoffice-help-eo1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-es1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-es1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-et1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-et1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-eu1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-eu1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-fi1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-fi1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-fr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-fr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-gl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-gl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-gu1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-gu1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-he1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-he1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-hi1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-hi1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-hr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-hr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-hu1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-hu1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-id1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-id1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-it1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-it1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ja1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ja1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ko1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ko1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-lt1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-lt1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-lv1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-lv1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-nb1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-nb1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-nl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-nl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-nn1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-nn1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-pl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-pl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-pt-BR1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-pt-BR1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-pt-PT1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-pt-PT1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ro1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ro1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ru1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ru1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-si1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-si1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-sk1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-sk1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-sl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-sl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-sv1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-sv1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ta1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ta1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-tr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-tr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-uk1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-uk1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-zh-Hans1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-zh-Hans1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-zh-Hant1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-zh-Hant1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-impress1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-impress1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-af1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-af1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-ar1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-ar1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-as1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-as1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-bg1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-bg1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-bn1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-bn1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-br1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-br1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-ca1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-ca1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-cs1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-cs1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-cy1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-cy1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-da1:6.4.7.2-12.el8_7.almaALSA-2023:0089

Affected products (as reported)

VendorProductVersions
The Document Foundation LibreOffice 7.2 – before 7.2.77.3 – before 7.3.1

Weakness: CWE-326

References