What’s Vulnerable › Vulnerabilities

CVE-2014-3693

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-11-07 · updated 2026-06-17

Description

Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to TCP port 1599.

Affected products

• Canonical Ubuntu Linux: 14.04, 14.10
• The Document Foundation LibreOffice: 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.3.3, 4.0.4.2 (+15)
• Opensuse: 13.1
• RedHat Enterprise Linux Desktop: 7.0
• RedHat Enterprise Linux Server: 7.0
• RedHat Enterprise Linux Workstation: 7.0

References

• http://lists.opensuse.org/opensuse-updates/2014-11/msg00049.html
• http://rhn.redhat.com/errata/RHSA-2015-0377.html
• http://secunia.com/advisories/62111
• http://secunia.com/advisories/62132
• http://secunia.com/advisories/62396
• http://www.securityfocus.com/bid/71351
• http://www.ubuntu.com/usn/USN-2398-1
• https://security.gentoo.org/glsa/201603-05
• https://www.libreoffice.org/about-us/security/advisories/CVE-2014-3693/
• http://lists.opensuse.org/opensuse-updates/2014-11/msg00049.html
• http://rhn.redhat.com/errata/RHSA-2015-0377.html
• http://secunia.com/advisories/62111

Get alerted when CVE-2014-3693 or the next vulnerability affects your stack