Critical SSRF and Local File Inclusion Vulnerability in unoconv Package
Summary
DEBIAN-CVE-2019-17400: The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. Affects unoconv versions < 0.7-2. Fixed in 0.7-2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The unoconv package is a command-line utility that facilitates the conversion of documents between different formats using LibreOffice. It is widely used in various applications for document processing. However, prior to version 0.9, unoconv has been found to mishandle untrusted pathnames, making it susceptible to security vulnerabilities.
Vulnerability Detail
The vulnerability identified as DEBIAN-CVE-2019-17400 arises from the unoconv package's improper handling of untrusted pathnames. This flaw can lead to Server-Side Request Forgery (SSRF) and local file inclusion, allowing attackers to manipulate file paths and potentially access sensitive files on the server. The vulnerability affects versions of unoconv before 0.9 and poses a low urgency risk, but it can still have significant implications if exploited.
How To Fix
Minimum fixed version
0.7-2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade unoconvTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users are advised to restrict access to the unoconv utility or to validate and sanitize input paths before processing them. This can help mitigate the risk of exploitation until the package is updated.
Conclusion
The unoconv package has a critical vulnerability that can lead to SSRF and local file inclusion if not addressed. Users are encouraged to update to the latest version to mitigate risks. Additionally, implementing workarounds can provide temporary relief until the update is applied.
See every vulnerability recorded for unoconv →
FAQ
Unoconv is a command-line tool that converts documents between different formats using LibreOffice.
The primary vulnerabilities associated with unoconv include Server-Side Request Forgery (SSRF) and local file inclusion due to improper handling of untrusted pathnames.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If immediate updates are not possible, consider implementing input validation and restricting access to the unoconv utility as a temporary measure.
Yes, using an outdated version of unoconv exposes your system to potential exploitation through SSRF and local file inclusion vulnerabilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for unoconv.
