CVE-2023-36268
An issue in The Document Foundation Libreoffice v.7.4.7 allows a remote attacker to cause a...
DoS issues, or unexploitable crashes, are out of scope for vulnerabilities.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
What each source reports
GitHub Advisories Score usedGHSA-25mp-9vjg-j5g4
An issue in The Document Foundation Libreoffice v.7.4.7 allows a remote attacker to cause a...
An issue in The Document Foundation Libreoffice v.7.4.7 allows a remote attacker to cause a denial of service via a crafted .ppt file.
- Record
GHSA-25mp-9vjg-j5g4- CVSS 3.1
- 5.7 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-405
- Updated
- 2026-11-02
CVE List No score
DoS issues, or unexploitable crashes, are out of scope for vulnerabilities.
- Record
CVE-2023-36268- Updated
- 2026-11-02
EUVDEUVD-2023-40239 No score
DoS issues, or unexploitable crashes, are out of scope for vulnerabilities.
- Record
EUVD-2023-40239- Updated
- 2026-11-03
NVD No score
Rejected reason: DoS issues, or unexploitable crashes, are out of scope for vulnerabilities.
- Record
CVE-2023-36268- Updated
- 2026-11-02
OSV No score
Rejected reason: DoS issues, or unexploitable crashes, are out of scope for vulnerabilities.
- Record
CVE-2023-36268- Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-36268 No score
Rejected reason: DoS issues, or unexploitable crashes, are out of scope for vulnerabilities.
- Record
UBUNTU-CVE-2023-36268- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libreofficeUbuntu:20.04:LTS |
All versions, plus listed versions 1:6.3.2-0ubuntu21:6.3.3-0ubuntu11:6.3.3-0ubuntu21:6.3.4-0ubuntu11:6.4.0-0ubuntu4 Show 24 moreShow less1:6.4.0-0ubuntu61:6.4.0-0ubuntu71:6.4.1-0ubuntu11:6.4.2-0ubuntu11:6.4.2-0ubuntu21:6.4.2-0ubuntu31:6.4.3-0ubuntu0.20.04.11:6.4.4-0ubuntu0.20.04.11:6.4.5-0ubuntu0.20.04.11:6.4.6-0ubuntu0.20.04.11:6.4.7-0ubuntu0.20.04.11:6.4.7-0ubuntu0.20.04.21:6.4.7-0ubuntu0.20.04.41:6.4.7-0ubuntu0.20.04.51:6.4.7-0ubuntu0.20.04.61:6.4.7-0ubuntu0.20.04.71:6.4.7-0ubuntu0.20.04.81:6.4.7-0ubuntu0.20.04.91:6.4.7-0ubuntu0.20.04.101:6.4.7-0ubuntu0.20.04.111:6.4.7-0ubuntu0.20.04.121:6.4.7-0ubuntu0.20.04.131:6.4.7-0ubuntu0.20.04.141:6.4.7-0ubuntu0.20.04.15 |
None known |
libreofficeUbuntu:22.04:LTS |
All versions, plus listed versions 1:7.2.1-0ubuntu31:7.2.2-0ubuntu0.21.10.11:7.2.3~rc2-0ubuntu11:7.2.4-0ubuntu11:7.2.5~rc1-0ubuntu2 Show 25 moreShow less1:7.2.5~rc2-0ubuntu11:7.3.1~rc2-0ubuntu11:7.3.1~rc3-0ubuntu11:7.3.2~rc1-0ubuntu21:7.3.2~rc2-0ubuntu11:7.3.2-0ubuntu11:7.3.2-0ubuntu21:7.3.3-0ubuntu0.22.04.11:7.3.4-0ubuntu0.22.04.11:7.3.5-0ubuntu0.22.04.11:7.3.6-0ubuntu0.22.04.11:7.3.6-0ubuntu0.22.04.21:7.3.7-0ubuntu0.22.04.11:7.3.7-0ubuntu0.22.04.21:7.3.7-0ubuntu0.22.04.31:7.3.7-0ubuntu0.22.04.41:7.3.7-0ubuntu0.22.04.51:7.3.7-0ubuntu0.22.04.61:7.3.7-0ubuntu0.22.04.71:7.3.7-0ubuntu0.22.04.81:7.3.7-0ubuntu0.22.04.91:7.3.7-0ubuntu0.22.04.101:7.3.7-0ubuntu0.22.04.111:7.3.7-0ubuntu0.22.04.121:7.3.7-0ubuntu0.22.04.13 |
None known |
libreofficeUbuntu:24.04:LTS |
All versions, plus listed versions 4:7.6.2-0ubuntu14:7.6.3~rc1-0ubuntu24:7.6.3-0ubuntu34:7.6.4-0ubuntu14:7.6.4-0ubuntu3 Show 19 moreShow less4:24.2.0~rc1-0ubuntu14:24.2.1~rc1-0ubuntu14:24.2.1~rc2-0ubuntu14:24.2.2~rc2-0ubuntu14:24.2.2-0ubuntu14:24.2.3-0ubuntu0.24.04.14:24.2.3-0ubuntu0.24.04.24:24.2.4-0ubuntu0.24.04.14:24.2.4-0ubuntu0.24.04.24:24.2.5-0ubuntu0.24.04.14:24.2.5-0ubuntu0.24.04.24:24.2.6-0ubuntu0.24.04.14:24.2.7-0ubuntu0.24.04.14:24.2.7-0ubuntu0.24.04.24:24.2.7-0ubuntu0.24.04.34:24.2.7-0ubuntu0.24.04.44:24.2.7-0ubuntu0.24.04.54:24.2.7-0ubuntu0.24.04.64:24.2.7-0ubuntu0.24.04.7 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-36268 has been rejected by its source and should not be treated as a live vulnerability, published April 30, 2024.