CVE-2022-38745: Apache OpenOffice: Empty entry in Java class path
Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.
Other sources
Fixed in: LibreOffice 7.2.6/7.3.1
Description:
Most versions of LibreOffice support and contain components written in Java. LibreOffice extends the existing Java class path with its own internal classes.
In the affected versions of LibreOffice if the existing class path was empty, then when Java class files are loaded, the current working directory is searched for valid classes before using the embedded versions. If an attacker sends a zip file containing a class file alongside a document then, depending on the file manager or other tool used to open the zip file, when on navigating to the document and launching LibreOffice to open it, the current working directory of LibreOffice may be the directory in which the class file exists, in which case there is a risk that the arbitrary code of the class file could be executed.
In versions >= 7.2.6 (and >= 7.3.1) such unwanted empty paths are not appended to the classpath
References:
https://www.libreoffice.org/about-us/security/advisories/cve-2022-38745/
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Apache OpenOffice vulnerability?
The vulnerability ID for this Apache OpenOffice vulnerability is CVE-2022-38745.
What is the severity rating of CVE-2022-38745?
The severity rating of CVE-2022-38745 is high, with a value of 7.8.
What is the description of CVE-2022-38745?
CVE-2022-38745 is a vulnerability in Apache OpenOffice versions before 4.1.14, which allows the addition of an empty entry to the Java class path, potentially leading to the execution of arbitrary Java code from the current directory.
How does CVE-2022-38745 affect Apache OpenOffice?
CVE-2022-38745 affects Apache OpenOffice versions before 4.1.14, which are configured to add an empty entry to the Java class path.
Are there any fixes available for CVE-2022-38745?
Yes, updating Apache OpenOffice to version 4.1.14 or later will fix the vulnerability CVE-2022-38745.