The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_28922 advisory.

    * LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents (CVE-2026-4430)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_28290 advisory.

    * LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents (CVE-2026-4430)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0640 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-4430:
    Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with     mismatched encryption salt parameters.

    This issue affectsLibreOffice: from 26.2 before 26.2.3, from 25.8 before 25.8.7.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 25.10 / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8352-1 advisory.

    Duc Anh Nguyen discovered that LibreOffice incorrectly handled mismatched encryption salt parameters in     crafted OOXML documents. An attacker could use this issue to cause LibreOffice to crash, resulting in a     denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libreoffice installed on the remote host is prior to 5.3.6.1-21. It is, therefore, affected by a vulnerability as referenced in the ALAS2LIBREOFFICE-2026-008 advisory.

    NOTE: https://www.libreoffice.org/security/#cve-2026-4430NOTE:
    https://git.libreoffice.org/core/+/1ec3db717fa144ddff3e9b0a2338a82355cf365b (CVE-2026-4430)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1176:01 advisory.

    * LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents (CVE-2026-4430)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:28290 advisory.

    * LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents (CVE-2026-4430)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1428:03 advisory.

    * LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents (CVE-2026-4430)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46386 advisory.

    - Backport fix for CVE-2026-4430 [Orabug: 39791243]
    - Backport fix for CVE-2026-8357 [Orabug: 39791243]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:28922 advisory.

    * LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents (CVE-2026-4430)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3140-1 advisory.

    Update to LibreOffice 26.2.5.1.

    Security issues fixed:

    - CVE-2026-4430: out-of-bounds write via crafted OOXML documents with mismatched encryption salt     parameters       (bsc#1264357).
    - CVE-2026-6039: denial of service via specially crafted DXF polyline import (bsc#1268494).
    - CVE-2026-6040: heap use-after-free when importing the blank-width characters of an ODF number format     (bsc#1268527).
    - CVE-2026-6045: heap buffer overflow via crafted EMF+ graphics import (bsc#1268497).
    - CVE-2026-6047: denial of service via heap buffer overflow in OOXML document processing (bsc#1268504).
    - CVE-2026-8356: denial of service via a specially crafted PPT file (bsc#1268522).
    - CVE-2026-8357: heap buffer overflow in Calc formula compilation (bsc#1268528).
    - CVE-2026-8358: heap buffer overflow in spreadsheet tracked-changes import (bsc#1268529).
    - CVE-2026-50593: graphite2: out-of-bounds write via Graphite actions (bsc#1267735).

    Other updates and bugfixes:

    - Update to LibreOffice 26.2.5.1.
      - Update bundled dependencies:
        * `fontconfig` 2.17.1 -> 2.18.0
        * `graphite2-minimal` 1.3.14 -> 1.3.15
        * `libcmis` 0.6.2 -> 0.6.3
        * `libgpg-error` 1.59 -> 1.61
        * `lxml` 6.1.0 -> 6.1.1
        * `md4c` 0.5.2 -> 0.5.3
        * `poppler` 26.04.0 -> 26.06.0
        * `sqlite-amalgamation` 3530000 -> 3530100
        * `xmlsec1` 1.3.9 -> 1.3.11
    - Update to LibreOffice 26.2.3.2 (PED-16098).
      - Upgraded dependencies:
        * `boost`: 1_88_0 -> 1_89_0
        * `freetype`: 2.14.1 -> 2.14.3
        * `harfbuzz`: 12.3.0 -> 12.3.2
        * `icu4c`: 77_1 -> 78.3
        * `libgpg-error`: 1.56 -> 1.59
        * `liborcus`: 0.20.1 -> 0.21.0
        * `pdfium`: 7012 -> 7471
        * `poppler`: 25.12.0 -> 26.04.0
        * `skia`: m136 -> m142
      - New bundled sources:
        * `afdko` 4.0.3
        * `antlr4-cpp-runtime` 4.13.2
        * `fast_float` 8.2.2
        * `libffi` 3.5.2
        * `lxml` 6.1.0
        * `md4c` 0.5.2
        * `meson` 1.8.3
        * `Python` 3.12.13
        * `sqlite` 3530000
        * `xmlsec1` 1.3.9
        * `xz` 5.8.3
    - Add `patch`, required to build the bundled Python on all architectures.
    - Bundling a specific Python is now required as the one we ship (3.6) is too old to build `harfbuzz`.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
357651	Rocky Linux 8 [CIQ] Security Update: libreoffice-calc-debuginfo / libreoffice-core-debuginfo / etc (crlsa-2026_28922)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/2	medium
358934	Rocky Linux 9 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc (crlsa-2026_28290)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/2	medium
328425	TencentOS Server 3: libreoffice (TSSA-2026:0640)	Nessus	Tencent Local Security Checks	2026/7/20	2026/7/22	medium
318261	Ubuntu 25.10 / 26.04 LTS : LibreOffice vulnerability (USN-8352-1)	Nessus	Ubuntu Local Security Checks	2026/6/2	2026/6/9	medium
316950	Amazon Linux 2 : libreoffice, --advisory ALAS2LIBREOFFICE-2026-008 (ALASLIBREOFFICE-2026-008)	Nessus	Amazon Linux Local Security Checks	2026/5/27	2026/5/28	medium
325288	MiracleLinux 8 : libreoffice-6.4.7.2-20.el8_10.ML.1 (AXSA:2026-1176:01)	Nessus	Miracle Linux Local Security Checks	2026/7/6	2026/7/8	medium
326519	AlmaLinux 9 : libreoffice (ALSA-2026:28290)	Nessus	Alma Linux Local Security Checks	2026/7/13	2026/7/14	medium
332142	MiracleLinux 9 : libreoffice-7.1.8.1-15.el9_8.1.ML.1 (AXSA:2026-1428:03)	Nessus	Miracle Linux Local Security Checks	2026/8/5	2026/8/6	medium
339355	Oracle Linux 7 : libreoffice (ELSA-2026-46386)	Nessus	Oracle Linux Local Security Checks	2026/8/25	2026/8/26	medium
322732	RockyLinux 8 : libreoffice (RLSA-2026:28922)	Nessus	Rocky Linux Local Security Checks	2026/6/25	2026/6/26	medium
328909	SUSE SLED15: libreoffice / libreoffice-base / libreoffice-base-drivers-firebird / etc (SUSE-SU-2026:3140-1)	Nessus	SuSE Local Security Checks	2026/7/22	2026/7/23	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium