Cloudanix VulnDB

CVE-2024-6472

High · 7.8

CVSS

7.8

EPSS

0.2%

Published

Aug 5, 2024

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A problem in LibreOffice made it too easy for people to run harmful scripts inside documents because the warning about bad digital signatures was unclear.

Exploitation
Requires User Interaction
Attacker needs
User Interaction
Complexity
Low
Impact
Full Compromise
Component
Application
Class
Improper Input Validation
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

The certificate validation UI in LibreOffice fails to clearly communicate verification failure for signed macros, allowing users to enable execution despite an invalid or untrusted signature.

Why it matters to the business

Users may inadvertently execute malicious macros in documents, resulting in potential system compromise, data theft, or ransomware deployment on affected systems.

How an attack unfolds

An attacker crafts a document containing a macro signed with an invalid or mismatched certificate and distributes it to targets. When opened in vulnerable LibreOffice versions, the unclear warning dialog leads the user to enable the macro anyway, granting the attacker code execution.

How to fix it

Upgrade LibreOffice to version 24.2.5 or later. The fix is included in commit 2ccb78ad6bdfe3f3356a7a7f294ec388775c5816 for the core repository.

How to confirm the fix worked

Verify installed version is 24.2.5 or newer. Test by opening documents with intentionally invalid macro signatures and confirm that the warning clearly indicates verification failure and discourages enabling macros.

Typical attack path

  1. Craft a document with a macro signed using an invalid or untrusted certificate
  2. Distribute the document via email, download link, or shared storage
  3. Victim opens the document in an affected LibreOffice version
  4. User misinterprets the certificate validation warning and chooses to enable macros
  5. Malicious macro executes arbitrary code on the system

How to detect it

Review LibreOffice macro execution logs and user activity for unexpected enabling of macros from documents received via untrusted sources; correlate with file open events and subsequent process creation.

What your security team should do

  • Immediately update all LibreOffice installations to 24.2.5 or later
  • Disable macro execution by default via policy where feasible
  • Train users to treat any macro warning as a potential threat and avoid enabling unsigned or invalidly signed macros
  • Monitor for unexpected macro-enabled documents in email and file shares

The record

Certificate Validation user interface in LibreOffice allows potential vulnerability. Signed macros are scripts that have been digitally signed by the developer using a cryptographic signature. When a document with a signed macro is opened a warning is displayed by LibreOffice before the macro is executed. Previously if verification failed the user could fail to understand the failure and choose to enable the macros anyway. This issue affects LibreOffice: from 24.2 before 24.2.5.

Affected packages

Ecosystem Package Introduced Fixed
AlmaLinux:8 autocorr-af 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-bg 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-ca 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-cs 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-da 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-de 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-en 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-es 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-fa 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-fi 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-fr 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-ga 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-hr 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-hu 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-is 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-it 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-ja 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-ko 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-lb 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-lt 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-mn 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-nl 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-pl 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-pt 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-ro 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-ru 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-sk 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-sl 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-sr 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-sv 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-tr 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-vi 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 autocorr-zh 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-base 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-calc 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-core 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-data 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-draw 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-emailmerge 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-filters 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-gdb-debug-support 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-graphicfilter 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-gtk3 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ar 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-bg 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-bn 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ca 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-cs 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-da 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-de 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-dz 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-el 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-en 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-es 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-et 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-eu 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-fi 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-fr 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-gl 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-gu 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-he 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-hi 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-hr 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-hu 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-id 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-it 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ja 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ko 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-lt 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-lv 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-nb 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-nl 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-nn 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-pl 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-pt-BR 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-pt-PT 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ro 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ru 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-si 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-sk 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-sl 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-sv 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ta 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-tr 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-uk 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-zh-Hans 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-help-zh-Hant 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-impress 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-af 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ar 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-as 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-bg 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-bn 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-br 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ca 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-cs 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-cy 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-da 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-de 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-dz 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-el 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-en 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-es 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-et 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-eu 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-fa 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-fi 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-fr 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ga 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-gl 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-gu 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-he 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-hi 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-hr 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-hu 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-id 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-it 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ja 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-kk 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-kn 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ko 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-lt 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-lv 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-mai 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ml 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-mr 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-nb 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-nl 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-nn 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-nr 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-nso 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-or 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-pa 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-pl 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-pt-BR 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-pt-PT 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ro 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ru 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-si 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-sk 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-sl 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-sr 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ss 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-st 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-sv 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ta 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-te 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-th 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-tn 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-tr 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ts 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-uk 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ve 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-xh 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-zh-Hans 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-zh-Hant 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-zu 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-math 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-ogltrans 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-opensymbol-fonts 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-pdfimport 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-pyuno 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-sdk 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-sdk-doc 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-ure 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-ure-common 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-wiki-publisher 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-writer 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-x11 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreoffice-xsltfilter 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:8 libreofficekit 0 1:6.4.7.2-18.el8_10.alma.1
AlmaLinux:9 autocorr-af 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-bg 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-ca 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-cs 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-da 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-de 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-dsb 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-el 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-en 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-es 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-fa 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-fi 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-fr 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-ga 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-hr 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-hsb 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-hu 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-is 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-it 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-ja 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-ko 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-lb 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-lt 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-mn 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-nl 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-pl 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-pt 0 1:7.1.8.1-14.el9_4.alma.1
AlmaLinux:9 autocorr-ro 0 1:7.1.8.1-14.el9_4.alma.1

Related vulnerabilities