CVE-2021-41831 Timestamp Manipulation with Signature Wrapping

What is CVE-2021-41831?

CVE-2021-41831 is a medium-severity vulnerability in Apache Openoffice, published on 11 Oct 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.

Weakness: CWE-347

Which versions are affected by CVE-2021-41831?

It affects 1 product.

Products include Apache Openoffice.

How do I fix CVE-2021-41831?

No fix has been published for CVE-2021-41831 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-41831 being exploited?

There is no known exploitation of CVE-2021-41831 in the wild and no public exploit code.

Other vulnerabilities in Apache Openoffice

• CVE-2014-3524 Command injection in n/a Critical 9.3
• CVE-2010-3450 Path traversal in n/a Critical 9.3
• CVE-2010-3451 Use after free in n/a Critical 9.3
• CVE-2010-3452 Use after free in n/a Critical 9.3
• CVE-2010-3453 Memory corruption in n/a Critical 9.3

All Apache Openoffice vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-r2f7-jghr-r7x9.