CVE catalog

CVE-2023-0950

libreoffice: CVE-2023-0950

[CVE catalog]

Severity
High · CVSS 7.3CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.30% · Oct 25, 2026

Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet formulas, such as AGGREGATE, could be created with less parameters passed to the formula interpreter than it expected, leading to an array index underflow, in which case there is a risk that arbitrary code could be executed. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.6; 7.5 versions prior to 7.5.1.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibreofficesid4:26.8.1.1-3fixed
Debianlibreofficeforky4:26.8.1.1-3fixed
Debianlibreofficetrixie4:25.2.3-2+deb13u6fixed
Debianlibreofficetrixie-security4:25.2.3-2+deb13u8fixed
Debianlibreofficebookworm4:7.4.7-1+deb12u14fixed
Debianlibreofficebookworm-security4:7.4.7-1+deb12u13fixed
Ubuntulibreoffice20.041:6.3.2-0ubuntu2vulnerable
Ubuntulibreoffice20.041:6.3.3-0ubuntu1vulnerable
Ubuntulibreoffice20.041:6.3.3-0ubuntu2vulnerable
Ubuntulibreoffice20.041:6.3.4-0ubuntu1vulnerable
Ubuntulibreoffice20.041:6.4.0-0ubuntu4vulnerable
Ubuntulibreoffice20.041:6.4.0-0ubuntu6vulnerable
Ubuntulibreoffice20.041:6.4.0-0ubuntu7vulnerable
Ubuntulibreoffice20.041:6.4.1-0ubuntu1vulnerable
Ubuntulibreoffice20.041:6.4.2-0ubuntu1vulnerable
Ubuntulibreoffice20.041:6.4.2-0ubuntu2vulnerable
Ubuntulibreoffice20.041:6.4.2-0ubuntu3vulnerable
Ubuntulibreoffice20.041:6.4.3-0ubuntu0.20.04.1vulnerable
Ubuntulibreoffice20.041:6.4.4-0ubuntu0.20.04.1vulnerable
Ubuntulibreoffice20.041:6.4.5-0ubuntu0.20.04.1vulnerable
Ubuntulibreoffice20.041:6.4.6-0ubuntu0.20.04.1vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.1vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.2vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.4vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.5vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.6vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.7vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.8fixed
Ubuntulibreoffice22.041:7.2.1-0ubuntu3vulnerable
Ubuntulibreoffice22.041:7.2.2-0ubuntu0.21.10.1vulnerable
Ubuntulibreoffice22.041:7.2.3~rc2-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.2.4-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.2.5~rc1-0ubuntu2vulnerable
Ubuntulibreoffice22.041:7.2.5~rc2-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.3.1~rc2-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.3.1~rc3-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.3.2~rc1-0ubuntu2vulnerable
Ubuntulibreoffice22.041:7.3.2~rc2-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.3.2-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.3.2-0ubuntu2vulnerable
Ubuntulibreoffice22.041:7.3.3-0ubuntu0.22.04.1vulnerable
Ubuntulibreoffice22.041:7.3.4-0ubuntu0.22.04.1vulnerable
Ubuntulibreoffice22.041:7.3.5-0ubuntu0.22.04.1vulnerable
Ubuntulibreoffice22.041:7.3.6-0ubuntu0.22.04.1vulnerable
Ubuntulibreoffice22.041:7.3.6-0ubuntu0.22.04.2vulnerable
Ubuntulibreoffice22.041:7.3.7-0ubuntu0.22.04.1vulnerable
Ubuntulibreoffice22.041:7.3.7-0ubuntu0.22.04.2vulnerable
Ubuntulibreoffice22.041:7.3.7-0ubuntu0.22.04.3fixed
Ubuntulibreoffice20.041:6.3.2-0ubuntu2vulnerable
Ubuntulibreoffice20.041:6.3.3-0ubuntu1vulnerable
Ubuntulibreoffice20.041:6.3.3-0ubuntu2vulnerable
Ubuntulibreoffice20.041:6.3.4-0ubuntu1vulnerable
Ubuntulibreoffice20.041:6.4.0-0ubuntu4vulnerable
Ubuntulibreoffice20.041:6.4.0-0ubuntu6vulnerable
Ubuntulibreoffice20.041:6.4.0-0ubuntu7vulnerable
Ubuntulibreoffice20.041:6.4.1-0ubuntu1vulnerable
Ubuntulibreoffice20.041:6.4.2-0ubuntu1vulnerable
Ubuntulibreoffice20.041:6.4.2-0ubuntu2vulnerable
Ubuntulibreoffice20.041:6.4.2-0ubuntu3vulnerable
Ubuntulibreoffice20.041:6.4.3-0ubuntu0.20.04.1vulnerable
Ubuntulibreoffice20.041:6.4.4-0ubuntu0.20.04.1vulnerable
Ubuntulibreoffice20.041:6.4.5-0ubuntu0.20.04.1vulnerable
Ubuntulibreoffice20.041:6.4.6-0ubuntu0.20.04.1vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.1vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.2vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.4vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.5vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.6vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.7vulnerable
Ubuntulibreoffice20.041:6.4.7-0ubuntu0.20.04.8fixed
Ubuntulibreoffice22.041:7.2.1-0ubuntu3vulnerable
Ubuntulibreoffice22.041:7.2.2-0ubuntu0.21.10.1vulnerable
Ubuntulibreoffice22.041:7.2.3~rc2-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.2.4-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.2.5~rc1-0ubuntu2vulnerable
Ubuntulibreoffice22.041:7.2.5~rc2-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.3.1~rc2-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.3.1~rc3-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.3.2~rc1-0ubuntu2vulnerable
Ubuntulibreoffice22.041:7.3.2~rc2-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.3.2-0ubuntu1vulnerable
Ubuntulibreoffice22.041:7.3.2-0ubuntu2vulnerable
Ubuntulibreoffice22.041:7.3.3-0ubuntu0.22.04.1vulnerable
Ubuntulibreoffice22.041:7.3.4-0ubuntu0.22.04.1vulnerable
Ubuntulibreoffice22.041:7.3.5-0ubuntu0.22.04.1vulnerable
Ubuntulibreoffice22.041:7.3.6-0ubuntu0.22.04.1vulnerable
Ubuntulibreoffice22.041:7.3.6-0ubuntu0.22.04.2vulnerable
Ubuntulibreoffice22.041:7.3.7-0ubuntu0.22.04.1vulnerable
Ubuntulibreoffice22.041:7.3.7-0ubuntu0.22.04.2vulnerable
Ubuntulibreoffice22.041:7.3.7-0ubuntu0.22.04.3fixed
Suseatklinux enterprise server for sap applications 12 sp42.28.1-6.5.23fixed
Susexmlsec1linux enterprise server for sap applications 12 sp41.2.37-8.6.21fixed
Suseatklinux enterprise server 12 sp2-bcl2.28.1-6.5.23fixed
Suseatklinux enterprise server 12 sp4-espos2.28.1-6.5.23fixed
Susexmlsec1linux enterprise server 12 sp4-espos1.2.37-8.6.21fixed
Suseatklinux enterprise server 12 sp4-ltss2.28.1-6.5.23fixed
Susexmlsec1linux enterprise server 12 sp4-ltss1.2.37-8.6.21fixed
Susexmlsec1linux enterprise micro 5.31.2.37-150400.14.3.4fixed
Susexmlsec1linux enterprise micro 5.41.2.37-150400.14.3.4fixed
Susexmlsec1linux enterprise module for basesystem 15 sp41.2.37-150400.14.3.4fixed
Susexmlsec1linux enterprise module for basesystem 15 sp51.2.37-150400.14.3.4fixed
Suselibreofficelinux enterprise module for package hub 15 sp47.5.4.1-150400.17.12.4fixed
Susexmlsec1linux enterprise module for package hub 15 sp41.2.37-150400.14.3.4fixed
Suselibreofficelinux enterprise module for package hub 15 sp57.5.4.1-150400.17.12.4fixed
Susexmlsec1linux enterprise module for package hub 15 sp51.2.37-150400.14.3.4fixed
Suselibreofficelinux enterprise workstation extension 15 sp47.5.4.1-150400.17.12.4fixed
Susexmlsec1linux enterprise workstation extension 15 sp41.2.37-150400.14.3.4fixed
Suselibreofficelinux enterprise workstation extension 15 sp57.5.4.1-150400.17.12.4fixed
Opensusexmlsec1leap micro 5.31.2.37-150400.14.3.4fixed
Opensusexmlsec1leap micro 5.41.2.37-150400.14.3.4fixed
Opensuselibreofficeleap 15.47.5.4.1-150400.17.12.4fixed
Opensusexmlsec1leap 15.41.2.37-150400.14.3.4fixed
Opensuselibreofficeleap 15.57.5.4.1-150400.17.12.4fixed
Opensusexmlsec1leap 15.51.2.37-150400.14.3.4fixed
Suseatkopenstack cloud 92.28.1-6.5.23fixed
Susexmlsec1openstack cloud 91.2.37-8.6.21fixed
Suseatkopenstack cloud crowbar 92.28.1-6.5.23fixed
Susexmlsec1openstack cloud crowbar 91.2.37-8.6.21fixed
Suseatklinux enterprise software development kit 12 sp52.28.1-6.5.23fixed
Suselibmwawlinux enterprise software development kit 12 sp50.3.21-7.24.14fixed
Suselibreofficelinux enterprise software development kit 12 sp57.5.4.1-48.44.2fixed
Susexmlsec1linux enterprise software development kit 12 sp51.2.37-8.6.21fixed
Suseatklinux enterprise server 12 sp52.28.1-6.5.23fixed
Susexmlsec1linux enterprise server 12 sp51.2.37-8.6.21fixed
Suseatklinux enterprise server for sap applications 12 sp52.28.1-6.5.23fixed
Susexmlsec1linux enterprise server for sap applications 12 sp51.2.37-8.6.21fixed
Susedragonboxlinux enterprise workstation extension 12 sp51.1.3-8.3.48fixed
Susefixmathlinux enterprise workstation extension 12 sp52022.07.20-8.3.48fixed
Suselibmwawlinux enterprise workstation extension 12 sp50.3.21-7.24.14fixed
Suselibreofficelinux enterprise workstation extension 12 sp57.5.4.1-48.44.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibreofficesourcesid4:7.4.5-3not yet assignedNot reportedNot reported
Debianlibreofficesourceforky4:7.4.5-3not yet assignedNot reportedNot reported
Debianlibreofficesourcetrixie4:7.4.5-3not yet assignedNot reportedNot reported
Debianlibreofficesourcebookworm4:7.4.5-3not yet assignedNot reportedNot reported
Ubuntulibreofficedeb20.041:6.4.7-0ubuntu0.20.04.8Not reportedUBUNTU-CVE-2023-0950Not reported
Ubuntulibreofficedeb22.041:7.3.7-0ubuntu0.22.04.3Not reportedUBUNTU-CVE-2023-0950Not reported
Ubuntulibreofficedeb20.041:6.4.7-0ubuntu0.20.04.8Not reportedUSN-6144-1Not reported
Ubuntulibreofficedeb22.041:7.3.7-0ubuntu0.22.04.3Not reportedUSN-6144-1Not reported
Suseatkrpmlinux enterprise server for sap applications 12 sp42.28.1-6.5.23Not reportedSUSE-FU-2023:3696-1Not reported
Susexmlsec1rpmlinux enterprise server for sap applications 12 sp41.2.37-8.6.21Not reportedSUSE-FU-2023:3696-1Not reported
Suseatkrpmlinux enterprise server 12 sp2-bcl2.28.1-6.5.23Not reportedSUSE-FU-2023:3696-1Not reported
Suseatkrpmlinux enterprise server 12 sp4-espos2.28.1-6.5.23Not reportedSUSE-FU-2023:3696-1Not reported
Susexmlsec1rpmlinux enterprise server 12 sp4-espos1.2.37-8.6.21Not reportedSUSE-FU-2023:3696-1Not reported
Suseatkrpmlinux enterprise server 12 sp4-ltss2.28.1-6.5.23Not reportedSUSE-FU-2023:3696-1Not reported
Susexmlsec1rpmlinux enterprise server 12 sp4-ltss1.2.37-8.6.21Not reportedSUSE-FU-2023:3696-1Not reported
Susexmlsec1rpmlinux enterprise micro 5.31.2.37-150400.14.3.4Not reportedSUSE-FU-2023:3413-1Not reported
Susexmlsec1rpmlinux enterprise micro 5.41.2.37-150400.14.3.4Not reportedSUSE-FU-2023:3413-1Not reported
Susexmlsec1rpmlinux enterprise module for basesystem 15 sp41.2.37-150400.14.3.4Not reportedSUSE-FU-2023:3413-1Not reported
Susexmlsec1rpmlinux enterprise module for basesystem 15 sp51.2.37-150400.14.3.4Not reportedSUSE-FU-2023:3413-1Not reported
Suselibreofficerpmlinux enterprise module for package hub 15 sp47.5.4.1-150400.17.12.4Not reportedSUSE-FU-2023:3413-1Not reported
Susexmlsec1rpmlinux enterprise module for package hub 15 sp41.2.37-150400.14.3.4Not reportedSUSE-FU-2023:3413-1Not reported
Suselibreofficerpmlinux enterprise module for package hub 15 sp57.5.4.1-150400.17.12.4Not reportedSUSE-FU-2023:3413-1Not reported
Susexmlsec1rpmlinux enterprise module for package hub 15 sp51.2.37-150400.14.3.4Not reportedSUSE-FU-2023:3413-1Not reported
Suselibreofficerpmlinux enterprise workstation extension 15 sp47.5.4.1-150400.17.12.4Not reportedSUSE-FU-2023:3413-1Not reported
Susexmlsec1rpmlinux enterprise workstation extension 15 sp41.2.37-150400.14.3.4Not reportedSUSE-FU-2023:3413-1Not reported
Suselibreofficerpmlinux enterprise workstation extension 15 sp57.5.4.1-150400.17.12.4Not reportedSUSE-FU-2023:3413-1Not reported
Opensusexmlsec1rpmleap micro 5.31.2.37-150400.14.3.4Not reportedSUSE-FU-2023:3413-1Not reported
Opensusexmlsec1rpmleap micro 5.41.2.37-150400.14.3.4Not reportedSUSE-FU-2023:3413-1Not reported
Opensuselibreofficerpmleap 15.47.5.4.1-150400.17.12.4Not reportedSUSE-FU-2023:3413-1Not reported
Opensusexmlsec1rpmleap 15.41.2.37-150400.14.3.4Not reportedSUSE-FU-2023:3413-1Not reported
Opensuselibreofficerpmleap 15.57.5.4.1-150400.17.12.4Not reportedSUSE-FU-2023:3413-1Not reported
Opensusexmlsec1rpmleap 15.51.2.37-150400.14.3.4Not reportedSUSE-FU-2023:3413-1Not reported
Suseatkrpmopenstack cloud 92.28.1-6.5.23Not reportedSUSE-SU-2024:0075-1Not reported
Susexmlsec1rpmopenstack cloud 91.2.37-8.6.21Not reportedSUSE-SU-2024:0075-1Not reported
Suseatkrpmopenstack cloud crowbar 92.28.1-6.5.23Not reportedSUSE-SU-2024:0075-1Not reported
Susexmlsec1rpmopenstack cloud crowbar 91.2.37-8.6.21Not reportedSUSE-SU-2024:0075-1Not reported
Suseatkrpmlinux enterprise software development kit 12 sp52.28.1-6.5.23Not reportedSUSE-SU-2024:0075-1Not reported
Suselibmwawrpmlinux enterprise software development kit 12 sp50.3.21-7.24.14Not reportedSUSE-SU-2024:0075-1Not reported
Suselibreofficerpmlinux enterprise software development kit 12 sp57.5.4.1-48.44.2Not reportedSUSE-SU-2024:0075-1Not reported
Susexmlsec1rpmlinux enterprise software development kit 12 sp51.2.37-8.6.21Not reportedSUSE-SU-2024:0075-1Not reported
Suseatkrpmlinux enterprise server 12 sp52.28.1-6.5.23Not reportedSUSE-SU-2024:0075-1Not reported
Susexmlsec1rpmlinux enterprise server 12 sp51.2.37-8.6.21Not reportedSUSE-SU-2024:0075-1Not reported
Suseatkrpmlinux enterprise server for sap applications 12 sp52.28.1-6.5.23Not reportedSUSE-SU-2024:0075-1Not reported
Susexmlsec1rpmlinux enterprise server for sap applications 12 sp51.2.37-8.6.21Not reportedSUSE-SU-2024:0075-1Not reported
Susedragonboxrpmlinux enterprise workstation extension 12 sp51.1.3-8.3.48Not reportedSUSE-SU-2024:0075-1Not reported
Susefixmathrpmlinux enterprise workstation extension 12 sp52022.07.20-8.3.48Not reportedSUSE-SU-2024:0075-1Not reported
Suselibmwawrpmlinux enterprise workstation extension 12 sp50.3.21-7.24.14Not reportedSUSE-SU-2024:0075-1Not reported
Suselibreofficerpmlinux enterprise workstation extension 12 sp57.5.4.1-48.44.2Not reportedSUSE-SU-2024:0075-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References