{"id":"ALPINE-CVE-2019-9849","details":"LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where bullet graphics were omitted from this protection prior to version 6.2.5. This issue affects: Document Foundation LibreOffice versions prior to 6.2.5.","modified":"2026-10-27T08:33:03.421653774Z","published":"2019-07-17T12:15:10.830Z","upstream":["CVE-2019-9849"],"references":[{"type":"ADVISORY","url":"https://security.alpinelinux.org/vuln/CVE-2019-9849"}],"affected":[{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.10","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.11","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.12","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.13","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.14","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.15","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.16","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.17","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.18","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.19","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.20","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.21","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.22","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.23","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}},{"package":{"name":"libreoffice","ecosystem":"Alpine:v3.24","purl":"pkg:apk/alpine/libreoffice?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.5.2-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-9849.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}]}