{"id":"CVE-2023-36268","aliases":["EUVD-2023-40239","GHSA-25mp-9vjg-j5g4","UBUNTU-CVE-2023-36268"],"status":"rejected","title":"An issue in The Document Foundation Libreoffice v.7.4.7 allows a remote attacker to cause a...","description":"DoS issues, or unexploitable crashes, are out of scope for vulnerabilities.","severity":{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-405"],"published":"2024-04-30T00:00:00Z","modified":"2026-10-05T19:20:39Z","affected":[{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6.3.2-0ubuntu2","1:6.3.3-0ubuntu1","1:6.3.3-0ubuntu2","1:6.3.4-0ubuntu1","1:6.4.0-0ubuntu4","1:6.4.0-0ubuntu6","1:6.4.0-0ubuntu7","1:6.4.1-0ubuntu1","1:6.4.2-0ubuntu1","1:6.4.2-0ubuntu2","1:6.4.2-0ubuntu3","1:6.4.3-0ubuntu0.20.04.1","1:6.4.4-0ubuntu0.20.04.1","1:6.4.5-0ubuntu0.20.04.1","1:6.4.6-0ubuntu0.20.04.1","1:6.4.7-0ubuntu0.20.04.1","1:6.4.7-0ubuntu0.20.04.2","1:6.4.7-0ubuntu0.20.04.4","1:6.4.7-0ubuntu0.20.04.5","1:6.4.7-0ubuntu0.20.04.6","1:6.4.7-0ubuntu0.20.04.7","1:6.4.7-0ubuntu0.20.04.8","1:6.4.7-0ubuntu0.20.04.9","1:6.4.7-0ubuntu0.20.04.10","1:6.4.7-0ubuntu0.20.04.11","1:6.4.7-0ubuntu0.20.04.12","1:6.4.7-0ubuntu0.20.04.13","1:6.4.7-0ubuntu0.20.04.14","1:6.4.7-0ubuntu0.20.04.15"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.2.1-0ubuntu3","1:7.2.2-0ubuntu0.21.10.1","1:7.2.3~rc2-0ubuntu1","1:7.2.4-0ubuntu1","1:7.2.5~rc1-0ubuntu2","1:7.2.5~rc2-0ubuntu1","1:7.3.1~rc2-0ubuntu1","1:7.3.1~rc3-0ubuntu1","1:7.3.2~rc1-0ubuntu2","1:7.3.2~rc2-0ubuntu1","1:7.3.2-0ubuntu1","1:7.3.2-0ubuntu2","1:7.3.3-0ubuntu0.22.04.1","1:7.3.4-0ubuntu0.22.04.1","1:7.3.5-0ubuntu0.22.04.1","1:7.3.6-0ubuntu0.22.04.1","1:7.3.6-0ubuntu0.22.04.2","1:7.3.7-0ubuntu0.22.04.1","1:7.3.7-0ubuntu0.22.04.2","1:7.3.7-0ubuntu0.22.04.3","1:7.3.7-0ubuntu0.22.04.4","1:7.3.7-0ubuntu0.22.04.5","1:7.3.7-0ubuntu0.22.04.6","1:7.3.7-0ubuntu0.22.04.7","1:7.3.7-0ubuntu0.22.04.8","1:7.3.7-0ubuntu0.22.04.9","1:7.3.7-0ubuntu0.22.04.10","1:7.3.7-0ubuntu0.22.04.11","1:7.3.7-0ubuntu0.22.04.12","1:7.3.7-0ubuntu0.22.04.13"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4:7.6.2-0ubuntu1","4:7.6.3~rc1-0ubuntu2","4:7.6.3-0ubuntu3","4:7.6.4-0ubuntu1","4:7.6.4-0ubuntu3","4:24.2.0~rc1-0ubuntu1","4:24.2.1~rc1-0ubuntu1","4:24.2.1~rc2-0ubuntu1","4:24.2.2~rc2-0ubuntu1","4:24.2.2-0ubuntu1","4:24.2.3-0ubuntu0.24.04.1","4:24.2.3-0ubuntu0.24.04.2","4:24.2.4-0ubuntu0.24.04.1","4:24.2.4-0ubuntu0.24.04.2","4:24.2.5-0ubuntu0.24.04.1","4:24.2.5-0ubuntu0.24.04.2","4:24.2.6-0ubuntu0.24.04.1","4:24.2.7-0ubuntu0.24.04.1","4:24.2.7-0ubuntu0.24.04.2","4:24.2.7-0ubuntu0.24.04.3","4:24.2.7-0ubuntu0.24.04.4","4:24.2.7-0ubuntu0.24.04.5","4:24.2.7-0ubuntu0.24.04.6","4:24.2.7-0ubuntu0.24.04.7"]}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36268"},{"url":"https://github.com/kfx-N/test1","tags":["report"]},{"url":"https://github.com/advisories/GHSA-25mp-9vjg-j5g4"},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-36268","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-36268","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-36268","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-36268","description":"DoS issues, or unexploitable crashes, are out of scope for vulnerabilities.","status":"rejected","published":"2024-04-30T00:00:00Z","modified":"2024-09-20T08:51:59.529Z","updated_at":"2026-11-02T14:35:28.218693Z"}],"euvd":[{"id":"EUVD-2023-40239","description":"DoS issues, or unexploitable crashes, are out of scope for vulnerabilities.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2024-09-20T08:51:59Z","updated_at":"2026-11-03T00:28:18.270703Z"}],"ghsa":[{"id":"GHSA-25mp-9vjg-j5g4","title":"An issue in The Document Foundation Libreoffice v.7.4.7 allows a remote attacker to cause a...","description":"An issue in The Document Foundation Libreoffice v.7.4.7 allows a remote attacker to cause a denial of service via a crafted .ppt file.","status":"published","published":"2024-04-30T18:30:33Z","modified":"2024-07-03T18:38:48Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-405"],"updated_at":"2026-11-02T14:57:35.422762Z"}],"nvd":[{"id":"CVE-2023-36268","description":"Rejected reason: DoS issues, or unexploitable crashes, are out of scope for vulnerabilities.","status":"rejected","published":"2024-04-30T18:15:19.73Z","modified":"2024-09-20T09:15:02.363Z","updated_at":"2026-11-02T14:09:11.362739Z"}],"osv":[{"id":"CVE-2023-36268","description":"Rejected reason: DoS issues, or unexploitable crashes, are out of scope for vulnerabilities.","status":"withdrawn","published":"2024-04-30T18:15:19Z","modified":"2024-09-20T11:45:28.589996Z","updated_at":"2026-11-02T15:44:32.510144Z"},{"id":"UBUNTU-CVE-2023-36268","description":"Rejected reason: DoS issues, or unexploitable crashes, are out of scope for vulnerabilities.","status":"published","published":"2024-04-30T18:15:00Z","modified":"2026-10-05T19:20:39.959854823Z","updated_at":"2026-11-02T16:54:21.882004Z"}]}}