CVE:CVE-2019-9854
CNNVD:CNNVD-201909-248
LibreOffice是文档基金会（The Document Foundation，TDF）的一套开源的办公软件套件。该产品包含Writer（文本文档）、Calc（电子表格）和Impress（演示文稿）等应用程序。
LibreOffice 6.2.7之前的6.2版本和6.3.1之前的6.3版本中存在路径遍历漏洞。该漏洞源于网络系统或产品未能正确地过滤资源或文件路径中的特殊元素。攻击者可利用该漏洞访问受限目录之外的位置。
solution:Upgrade libreoffice libreoffice to a higher version than 6.2.7,6.3.1,and avoid the version [6.2.0,6.2.7),[6.3.0,6.3.1); Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,and avoid the version 16.04,18.04,19.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade fedoraproject fedora to a higher version than 29,and avoid the version 29; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0