CVE-2024-7788

Publication date 17 September 2024

Last updated 27 September 2024

Ubuntu priority

Cvss 3 Severity Score

Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerability in LibreOfficeThis issue affects LibreOffice: from 24.2 before < 24.2.5.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
libreoffice	24.04 LTS noble	Fixed 4:24.2.5-0ubuntu0.24.04.2
	22.04 LTS jammy	Fixed 1:7.3.7-0ubuntu0.22.04.7
	20.04 LTS focal	Fixed 1:6.4.7-0ubuntu0.20.04.12

Notes

mdeslaur

unclear if this affects versions earlier than 24.2

Severity score breakdown

Parameter	Value
Base score	7.8 · High
Attack vector	Local
Attack complexity	Low
Privileges required	None
User interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Related Ubuntu Security Notices (USN)

USN-7025-1
LibreOffice vulnerability
19 September 2024