Vulnerability · Published Dec 11, 2023 · Assigned by Document Fdn.

CVE-2023-6185Improper input validation enabling arbitrary Gstreamer pipeline injection

High 8.3

In plain English

A high-severity security flaw in LibreOffice from The Document Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.3High
Exploit odds (30 days)1.0%top 36.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins. In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to run arbitrary gstreamer plugins depending on what plugins are installed on the target system.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8autocorr-af1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-af1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-af1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-bg1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-bg1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-bg1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-ca1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-ca1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-ca1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-cs1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-cs1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-cs1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-da1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-da1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-da1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-de1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-de1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-de1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-dsb1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-dsb1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-el1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-el1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-en1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-en1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-en1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-es1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-es1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-es1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-fa1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-fa1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-fa1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-fi1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-fi1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-fi1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-fr1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-fr1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-fr1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-ga1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-ga1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-ga1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-hr1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-hr1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-hr1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-hsb1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-hsb1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-hu1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-hu1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-hu1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-is1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-is1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-is1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-it1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-it1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-it1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-ja1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-ja1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-ja1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-ko1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-ko1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-ko1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-lb1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-lb1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-lb1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-lt1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-lt1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-lt1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-mn1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-mn1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-mn1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-nl1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-nl1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-nl1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-pl1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-pl1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-pl1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-pt1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-pt1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-pt1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-ro1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-ro1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-ro1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-ru1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-ru1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-ru1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-sk1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-sk1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-sk1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-sl1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-sl1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-sl1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-sr1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-sr1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-sr1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-sv1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-sv1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-sv1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-tr1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-tr1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-tr1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-vi1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-vi1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-vi1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-vro1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-vro1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-zh1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-zh1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-zh1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-base1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-base1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-base1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-calc1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-calc1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-calc1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-core1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-core1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-core1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-data1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-data1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-data1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-draw1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-draw1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-draw1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-emailmerge1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-emailmerge1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-emailmerge1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-filters1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-filters1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-filters1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-gdb-debug-support1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-gdb-debug-support1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-gdb-debug-support1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-graphicfilter1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-graphicfilter1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-graphicfilter1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-gtk31:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-gtk31:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-gtk31:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-ar1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-ar1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-ar1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-bg1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-bg1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-bg1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-bn1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-bn1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-bn1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-ca1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-ca1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-ca1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-cs1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-cs1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-cs1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-da1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-da1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-da1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-de1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-de1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-de1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-dz1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-dz1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-dz1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-el1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-el1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-el1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-en1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-en1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-en1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-help-eo1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-eo1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-es1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-es1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-es1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-et1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-et1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-et1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-eu1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-eu1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-eu1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-fi1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-fi1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-help-fi1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-help-fr1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-fr1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-fr1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-gl1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-gl1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-help-gl1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-help-gu1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-gu1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-gu1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-he1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-he1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-he1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-hi1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-hi1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-hi1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-hr1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514

Affected products (as reported)

VendorProductVersions
The Document Foundation LibreOffice 7.5 – before 7.5.97.6 – before 7.6.3

References