Vulnerability · Published Mar 21, 2025 · Assigned by Document Fdn.

CVE-2021-25635Content Manipulation with Certificate Validation Attack

Medium 5.2

In plain English

A medium-severity improper certificate validation in LibreOffice from The Document Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)5.2Medium
Exploit odds (30 days)0.1%top 96.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then modify it to change the signature algorithm to an invalid (or unknown to LibreOffice) algorithm and LibreOffice would incorrectly present such a signature with an unknown algorithm as a valid signature issued by a trusted person This issue affects LibreOffice: from 7.0 before 7.0.5, from 7.1 before 7.1.1.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8autocorr-af1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-bg1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ca1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-cs1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-da1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-de1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-en1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-es1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-fa1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-fi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-fr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ga1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-hr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-hu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-is1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-it1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ja1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ko1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-lb1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-lt1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-mn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-nl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-pl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-pt1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ro1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-ru1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-sk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-sl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-sr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-sv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-tr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-vi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8autocorr-zh1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-base1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-calc1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-core1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-data1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-draw1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-emailmerge1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-filters1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-gdb-debug-support1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-graphicfilter1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-gtk31:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ar1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-bg1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-bn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ca1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-cs1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-da1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-de1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-dz1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-el1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-en1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-es1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-et1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-eu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-fi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-fr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-gl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-gu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-he1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-hi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-hr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-hu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-id1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-it1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ja1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ko1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-lt1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-lv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-nb1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-nl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-nn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-pl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-pt-BR1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-pt-PT1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ro1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ru1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-si1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-sk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-sl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-sv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-ta1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-tr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-uk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-zh-Hans1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-help-zh-Hant1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-impress1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-af1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ar1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-as1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-bg1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-bn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-br1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ca1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-cs1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-cy1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-da1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-de1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-dz1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-el1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-en1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-es1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-et1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-eu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-fa1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-fi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-fr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ga1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-gl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-gu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-he1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-hi1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-hr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-hu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-id1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-it1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ja1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-kk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-kn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ko1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-lt1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-lv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-mai1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ml1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-mr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nb1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-nso1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-or1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-pa1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-pl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-pt-BR1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-pt-PT1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ro1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ru1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-si1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-sk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-sl1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-sr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ss1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-st1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-sv1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ta1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-te1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-th1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-tn1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-tr1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ts1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-uk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-ve1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-xh1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-zh-Hans1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-zh-Hant1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-langpack-zu1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-math1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-ogltrans1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-opensymbol-fonts1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-pdfimport1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-pyuno1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-sdk1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-sdk-doc1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-ure1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-ure-common1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-wiki-publisher1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-writer1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-x111:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreoffice-xsltfilter1:6.4.7.2-10.el8.almaALSA-2022:1766
AlmaLinux:8libreofficekit1:6.4.7.2-10.el8.almaALSA-2022:1766
Alpine:v3.20libreoffice7.2.2.2-r0ALPINE-CVE-2021-25635
Alpine:v3.21libreoffice7.2.2.2-r0ALPINE-CVE-2021-25635
Alpine:v3.22libreoffice7.2.2.2-r0ALPINE-CVE-2021-25635
Alpine:v3.23libreoffice7.2.2.2-r0ALPINE-CVE-2021-25635
Alpine:v3.24libreoffice7.2.2.2-r0ALPINE-CVE-2021-25635
Rocky Linux:8libreoffice1:6.4.7.2-10.el8RLSA-2022:1766
Ubuntu:22.04:LTSlibreoffice1:7.2.1-0ubuntu3UBUNTU-CVE-2021-25635

Affected products (as reported)

VendorProductVersions
The Document Foundation LibreOffice 7.0 – before 7.0.57.1 – before 7.1.1

Weakness: CWE-295 · Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H

References