{"id":"CVE-2020-12801","aliases":["ALPINE-CVE-2020-12801","DEBIAN-CVE-2020-12801","DLA-3703-1","EUVD-2020-5084","GHSA-52g9-8355-62qv","MGASA-2020-0258","SUSE-SU-2020:1530-1","SUSE-SU-2020:1731-1","UBUNTU-CVE-2020-12801","USN-5694-1","openSUSE-SU-2020:0786-1","openSUSE-SU-2024:10983-1"],"status":"published","title":"Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save","description":"If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01287,"percentile":0.7055,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-311","CWE-312"],"published":"2020-05-18T14:20:08Z","modified":"2026-11-03T06:32:30Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"libreoffice","fixed_in":["6.4.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libreoffice","fixed_in":["6.4.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libreoffice","fixed_in":["6.4.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libreoffice","fixed_in":["6.4.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libreoffice","fixed_in":["6.4.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libreoffice","fixed_in":["6.4.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libreoffice","fixed_in":["6.4.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libreoffice","fixed_in":["6.4.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libreoffice","fixed_in":["6.4.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libreoffice","fixed_in":["6.4.3.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libreoffice","fixed_in":["1:6.4.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libreoffice","fixed_in":["1:6.4.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libreoffice","fixed_in":["1:6.4.3-1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libabw","fixed_in":["0.1.3-1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libcdr","fixed_in":["0.1.6-1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libmwaw","fixed_in":["0.3.16-1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libvisio","fixed_in":["0.1.7-1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libwps","fixed_in":["0.4.11-1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libixion","fixed_in":["0.15.0-6.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"liborcus","fixed_in":["0.15.3-4.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"mdds","fixed_in":["1.5.0-1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"fmt","fixed_in":["6.2.1-1.1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"spdlog","fixed_in":["1.6.0-1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"qr-code-generator","fixed_in":["1.5.0-6.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libreoffice","fixed_in":["6.4.4.2-1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"celestia","fixed_in":["1.7.0-0.20190423git.920a0c8.2.1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"kodi","fixed_in":["18.7-1.1.mga7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP1","package":"libreoffice","fixed_in":["6.4.4.2-8.19.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libreoffice","fixed_in":["6.4.4.2-43.65.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libreoffice","fixed_in":["6.4.4.2-43.65.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"libreoffice","fixed_in":["6.4.4.2-43.65.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"libreoffice","fixed_in":["6.4.4.2-43.65.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libreoffice","fixed_in":["1:6.0.7-0ubuntu0.18.04.12"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"libreoffice","fixed_in":["6.4.4.2-lp151.3.15.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0"},{"fixed":"6.4.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0"},{"fixed":"6.4.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0"},{"fixed":"6.4.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0"},{"fixed":"6.4.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0"},{"fixed":"6.4.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0"},{"fixed":"6.4.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0"},{"fixed":"6.4.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0"},{"fixed":"6.4.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0"},{"fixed":"6.4.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0"},{"fixed":"6.4.3.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.4.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.4.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.4.3-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.5-3+deb10u11"}]}],"versions":["1:6.1.5-3","1:6.1.5-3+deb10u1","1:6.1.5-3+deb10u10","1:6.1.5-3+deb10u2","1:6.1.5-3+deb10u2~bpo9+1","1:6.1.5-3+deb10u3","1:6.1.5-3+deb10u4","1:6.1.5-3+deb10u4~bpo9+1","1:6.1.5-3+deb10u5","1:6.1.5-3+deb10u6","1:6.1.5-3+deb10u7","1:6.1.5-3+deb10u8","1:6.1.5-3+deb10u9"],"bundled":5},{"source":"osv","ecosystem":"Mageia:7","package":"libabw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.3-1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"libcdr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.6-1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.16-1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"libvisio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.7-1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"libwps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.11-1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"libixion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-6.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"liborcus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.3-4.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"mdds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"fmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-1.1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"spdlog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"qr-code-generator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-6.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.4.2-1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"celestia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-0.20190423git.920a0c8.2.1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.7-1.1.mga7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP1","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.4.2-8.19.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.4.2-43.65.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.4.2-43.65.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.4.2-43.65.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.4.2-43.65.5"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.7-0ubuntu0.18.04.12"}]}],"versions":["1:5.4.1-0ubuntu1","1:5.4.1-0ubuntu3","1:5.4.2-0ubuntu5","1:5.4.3-0ubuntu1","1:5.4.4-0ubuntu5","1:6.0.1-0ubuntu3","1:6.0.2-0ubuntu1","1:6.0.3-0ubuntu1","1:6.0.6-0ubuntu0.18.04.1","1:6.0.7-0ubuntu0.18.04.2","1:6.0.7-0ubuntu0.18.04.5","1:6.0.7-0ubuntu0.18.04.6","1:6.0.7-0ubuntu0.18.04.7","1:6.0.7-0ubuntu0.18.04.8","1:6.0.7-0ubuntu0.18.04.9","1:6.0.7-0ubuntu0.18.04.10","1:6.0.7-0ubuntu0.18.04.11"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.7-0ubuntu0.18.04.12"}]}],"versions":["1:5.4.1-0ubuntu1","1:5.4.1-0ubuntu3","1:5.4.2-0ubuntu5","1:5.4.3-0ubuntu1","1:5.4.4-0ubuntu5","1:6.0.1-0ubuntu3","1:6.0.2-0ubuntu1","1:6.0.3-0ubuntu1","1:6.0.6-0ubuntu0.18.04.1","1:6.0.7-0ubuntu0.18.04.2","1:6.0.7-0ubuntu0.18.04.5","1:6.0.7-0ubuntu0.18.04.6","1:6.0.7-0ubuntu0.18.04.7","1:6.0.7-0ubuntu0.18.04.8","1:6.0.7-0ubuntu0.18.04.9","1:6.0.7-0ubuntu0.18.04.10","1:6.0.7-0ubuntu0.18.04.11"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.4.7-0ubuntu0.20.04.6"}]}],"versions":["1:6.3.2-0ubuntu2","1:6.3.3-0ubuntu1","1:6.3.3-0ubuntu2","1:6.3.4-0ubuntu1","1:6.4.0-0ubuntu4","1:6.4.0-0ubuntu6","1:6.4.0-0ubuntu7","1:6.4.1-0ubuntu1","1:6.4.2-0ubuntu1","1:6.4.2-0ubuntu2","1:6.4.2-0ubuntu3","1:6.4.3-0ubuntu0.20.04.1","1:6.4.4-0ubuntu0.20.04.1","1:6.4.5-0ubuntu0.20.04.1","1:6.4.6-0ubuntu0.20.04.1","1:6.4.7-0ubuntu0.20.04.1","1:6.4.7-0ubuntu0.20.04.2","1:6.4.7-0ubuntu0.20.04.4","1:6.4.7-0ubuntu0.20.04.5"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.3.6-0ubuntu0.22.04.2"}]}],"versions":["1:7.2.1-0ubuntu3","1:7.2.2-0ubuntu0.21.10.1","1:7.2.3~rc2-0ubuntu1","1:7.2.4-0ubuntu1","1:7.2.5~rc1-0ubuntu2","1:7.2.5~rc2-0ubuntu1","1:7.3.1~rc2-0ubuntu1","1:7.3.1~rc3-0ubuntu1","1:7.3.2~rc1-0ubuntu2","1:7.3.2~rc2-0ubuntu1","1:7.3.2-0ubuntu1","1:7.3.2-0ubuntu2","1:7.3.3-0ubuntu0.22.04.1","1:7.3.4-0ubuntu0.22.04.1","1:7.3.5-0ubuntu0.22.04.1","1:7.3.6-0ubuntu0.22.04.1"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.4.2-lp151.3.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.5.2-3.13"}]}],"bundled":24}],"products":[{"vendor":"libreoffice","product":"libreoffice"},{"vendor":"opensuse","product":"leap"},{"vendor":"the document foundation","product":"libreoffice"}],"references":[{"url":"https://www.libreoffice.org/about-us/security/advisories/CVE-2020-12801","tags":["x_transferred","Vendor Advisory","advisory","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00011.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00026.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12801"},{"url":"https://github.com/advisories/GHSA-52g9-8355-62qv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-12801","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-12801","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0258.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26641","tags":["report"]},{"url":"https://www.libreoffice.org/about-us/security/advisories/cve-2020-12801/","tags":["advisory"]},{"url":"https://wiki.documentfoundation.org/ReleaseNotes/6.3","tags":["web"]},{"url":"https://wiki.documentfoundation.org/ReleaseNotes/6.4","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201530-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1160687","tags":["report"]},{"url":"https://bugzilla.suse.com/1165870","tags":["report"]},{"url":"https://bugzilla.suse.com/1167463","tags":["report"]},{"url":"https://bugzilla.suse.com/1171997","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12801","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201731-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-12801","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5694-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-12801","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-12803","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-26305","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-26306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-26307","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BCWIVISCVSRNS3AKNPOZ7SLWOT4RWQ4Y/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12803","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-12801","title":"Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save","description":"If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.","status":"published","published":"2020-05-18T14:20:08.325Z","modified":"2024-11-18T17:29:42.515Z","cwes":["CWE-311"],"updated_at":"2026-11-02T14:35:53.236501Z"}],"euvd":[{"id":"EUVD-2020-5084","description":"If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.","status":"published","published":"2020-05-18T14:20:08Z","modified":"2024-11-18T17:29:42Z","updated_at":"2026-11-03T00:04:56.531722Z"}],"ghsa":[{"id":"GHSA-52g9-8355-62qv","title":"If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted....","description":"If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.","status":"published","published":"2022-05-24T17:18:03Z","modified":"2023-12-31T15:30:24Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-311","CWE-312"],"updated_at":"2026-11-02T14:55:18.712206Z"}],"nvd":[{"id":"CVE-2020-12801","description":"If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.","status":"published","published":"2020-05-18T15:15:11.003Z","modified":"2026-06-17T02:52:19.5Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-311","CWE-312"],"updated_at":"2026-11-02T14:06:00.784809Z"}],"osv":[{"id":"ALPINE-CVE-2020-12801","description":"If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.","status":"published","published":"2020-05-18T15:15:11.003Z","modified":"2026-11-03T06:32:30.695840236Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:17:41.158523Z"},{"id":"CVE-2020-12801","description":"If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.","status":"published","published":"2020-05-18T15:15:11.003Z","modified":"2026-10-24T14:06:58.223125069Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:14.034736Z"},{"id":"DEBIAN-CVE-2020-12801","description":"If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.","status":"published","published":"2020-05-18T15:15:11.003Z","modified":"2026-10-26T12:01:33.983286487Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"UBUNTU-CVE-2020-12801","description":"If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.","status":"published","published":"2020-05-18T15:15:00Z","modified":"2026-04-22T12:28:30.81809Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:22.804634Z"},{"id":"DLA-3703-1","title":"libreoffice - security update","status":"published","published":"2023-12-31T00:00:00Z","modified":"2026-03-09T02:11:31.883162Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2020-0258","title":"Updated libreoffice packages fix security vulnerability","description":"This update increase Libreoffice to version 6.4.4.2\nIt fixes Security issues and add kf5 support.\n\nIf LibreOffice has an encrypted document open and crashes, that\ndocument is auto-saved encrypted. On restart, LibreOffice offers\nto restore the document and prompts for the password to decrypt it.\nIf the recovery is successful, and if the file format of the recovered\ndocument was not LibreOffice's default ODF file format, then affected\nversions of LibreOffice default that subsequent saves of the document\nare unencrypted.\n\nThis may lead to a user accidentally saving a MSOffice file format\ndocument unencrypted while believing it to be encrypted.\n\nIn the fixed versions, encrypted recovered MSOffice format documents\ndefault to encrypted save.\n","status":"published","published":"2020-06-12T23:58:55Z","modified":"2026-04-16T04:43:26.580405868Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0786-1","title":"Security update for libreoffice","description":"This update for libreoffice to 6.4.4.2 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2020-12801: Fixed an issue with encrypted MSOffice documents that could be accidentally saved unencrypted (bsc#1171997).\n\nNon-security issues fixed:\n\n- Elements on title page mixed up (bsc#1160687).\n- Image shadow that should be invisible shown as extraneous line below (bsc#1165870). \n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-06-08T10:22:01Z","modified":"2026-02-04T04:00:50.253357Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10983-1","title":"libreoffice-7.1.5.2-3.13 on GA media","description":"These are all security issues fixed in the libreoffice-7.1.5.2-3.13 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:26:49.903307Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:1530-1","title":"Security update for libreoffice","description":"This update for libreoffice to 6.4.4.2 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2020-12801: Fixed an issue with encrypted MSOffice documents that could be accidentally saved unencrypted (bsc#1171997).\n\nNon-security issues fixed:\n\n- Elements on title page mixed up (bsc#1160687).\n- Image shadow that should be invisible shown as extraneous line below (bsc#1165870). \n","status":"published","published":"2020-06-04T08:14:53Z","modified":"2025-05-02T04:09:42.960727Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1731-1","title":"Security update for libreoffice","description":"This update for libreoffice to 6.4.4.2 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2020-12801: Fixed an issue with encrypted MSOffice documents that could be accidentally saved unencrypted (bsc#1171997).\n\nNon-security issues fixed:\n\n- Elements on title page mixed up (bsc#1160687).\n- Image shadow that should be invisible shown as extraneous line below (bsc#1165870). \n","status":"published","published":"2020-06-24T07:42:05Z","modified":"2026-02-04T02:49:19.46573Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-5694-1","title":"libreoffice vulnerabilities","description":"It was discovered that LibreOffice incorrectly handled links using the\nOffice URI Schemes. If a user were tricked into opening a specially\ncrafted document, a remote attacker could use this issue to execute\narbitrary scripts. (CVE-2022-3140)\n\nThomas Florian discovered that LibreOffice incorrectly handled crashes when\nan encrypted document is open. If the document is recovered upon restarting\nLibreOffice, subsequent saves of the document were unencrypted. This issue\nonly affected Ubuntu 18.04 LTS. (CVE-2020-12801)\n\nJens Müller discovered that LibreOffice incorrectly handled certain\ndocuments containing forms. If a user were tricked into opening a specially\ncrafted document, a remote attacker could overwrite arbitrary files when\nthe form was submitted. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2020-12803)\n\nIt was discovered that LibreOffice incorrectly validated macro signatures.\nIf a user were tricked into opening a specially crafted document, a remote\nattacker could possibly use this issue to execute arbitrary macros. This\nissue only affected Ubuntu 18.04 LTS. (CVE-2022-26305)\n\nIt was discovered that Libreoffice incorrectly handled encrypting the\nmaster key provided by the user for storing passwords for web connections.\nA local attacker could possibly use this issue to obtain access to\npasswords stored in the user’s configuration data. This issue only affected\nUbuntu 18.04 LTS. (CVE-2022-26306, CVE-2022-26307)\n","status":"published","published":"2022-10-20T12:52:30Z","modified":"2026-04-22T10:15:42.988369Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}