Notification

Icon
Error

LibreOffice Vulnerability Report

Posted: Tuesday, February 5, 2019 4:56:00 PM(UTC)
Esben.D

Esben.D

Member Administration Original PosterPosts: 1,982
1
Like
Hey everybody,

We've released a new blog post regarding the LibreOffice vulnerability. If you're interested in the specifics, I suggest you give it a read.

The report below will give you a color-coded overview of all Windows and Linux assets in your network that are not on the latest release of LibreOffice and should be updated. Please note that this report will only check whether LibreOffice is on the latest stable version at the time of posting.

The report will list assets that meet the following criteria:
  • The asset is a Windows or Linux Asset
  • The asset is Active
  • The asset has software installed which contains LibreOffice in its name
If you have any feedback on the report, feel free to leave it and I'll take a look at it.
Code:
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tsysAssetTypes.AssetTypename As AssetType,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tsysOS.OSname As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  Case
    When tblSoftwareUni.softwareName Like '%libreoffice%' And
      (tblSoftware.softwareVersion Like '6.0.7%' Or
      tblSoftware.softwareVersion Like '6.1.4%') Then '#d4f4be'
    Else '#ffadad'
  End As backgroundcolor,
  tblSoftwareUni.softwareName As Software,
  tblSoftware.softwareVersion As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
  tblSoftware.Lastchanged,
  Case
    When tblSoftwareUni.softwareName Like '%libreoffice%' And
      (tblSoftware.softwareVersion not like '6.0.7%' OR tblSoftware.softwareVersion Like '6.1.4%')  Then ''
	  Else 'LibreOffice update recommended'
  End As Notes
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
  Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
  Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName Like '%LibreOffice%' And tblState.Statename =
  'Active'
Union
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tsysAssetTypes.AssetTypename As AssetType,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblLinuxSystem.OSRelease As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  Case
    When tblSoftwareUni.softwareName Like '%libreoffice%' And
      (tblLinuxSoftware.Version Like '%6.0.7%' Or
      tblLinuxSoftware.Version Like '%6.1.4%') Then '#d4f4be'
    Else '#ffadad'
  End As backgroundcolor,
  tblSoftwareUni.softwareName As Software,
  tblLinuxSoftware.Version As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
  tblLinuxSoftware.LastChanged,
  Case
    When tblSoftwareUni.softwareName Like '%libreoffice%' And
      (tblLinuxSoftware.Version Like '%6.0.7%' Or
      tblLinuxSoftware.Version Like '%6.1.4%') Then ''
    Else 'LibreOffice update recommended'
  End As Notes
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblLinuxSoftware On tblAssets.AssetID = tblLinuxSoftware.AssetID
  Inner Join tblSoftwareUni On
    tblSoftwareUni.SoftID = tblLinuxSoftware.SoftwareUniID
  Inner Join tblLinuxSystem On tblAssets.AssetID = tblLinuxSystem.AssetID
Where tblSoftwareUni.softwareName Like '%LibreOffice%' And tblState.Statename =
  'Active'
Order By Domain,
  AssetName,
  Software
Options
yura_koresh
#1yura_koresh Member Posts: 3  
posted: 3/9/2019 6:49:21 PM(UTC)
Hello for some reason it shows in red also 6.1.1.2, 6.2.0.3.
Also is there a way to show only vulnerable versions?
And does anyone know how to create the deployment package for the correct version ?
Thanks in advance!
[img]null[/img]
0
ghelpdesk
#2ghelpdesk Member Posts: 98  
posted: 3/10/2019 2:46:29 PM(UTC)
Perhaps a software vulnerability user editable reference table could be added to the wishlist? So instead of creating these reports individually whenever a vulnerability is reported - an entry could be added to the vulnerability table citing the software (or OS), a from and to version field to create a range of version values that are vulnerable and a comment field to enter the vulnerability name or other brief info (ie: which version introduces a fix to the software).

Then a single vulnerability report could be added as a standard built-in report (perhaps with a default email schedule to the entered LS admin address)

The vulnerability data could stay in the table long-term so that another report could be generated using this data and an assets software history to report on how long the asset may have been exposed to a vulnerability.

I recall the Spectre and Meltdown had a more complicated set of criteria but a vulnerability reference table might cover the majority of cases.
0

Active Discussions

Lansweeper Duplicate Users On report
by  RC62N   Go to last post Go to first unread
Last post: Today at 3:51:07 PM(UTC)
Lansweeper Local Admin Group Members
by  ggbce   Go to last post Go to first unread
Last post: Today at 2:28:50 PM(UTC)
Lansweeper Last used system of users in a specific OU
by  chriscornelis   Go to last post Go to first unread
Last post: Yesterday at 11:11:35 AM(UTC)
Lansweeper Trying to display different versions of software
by  TimHolmes1973   Go to last post Go to first unread
Last post: 10/28/2020 8:54:04 PM(UTC)
Lansweeper Switch & Port reports - SNMPInfo tables missing info
by  Maxlieb   Go to last post Go to first unread
Last post: 10/28/2020 1:02:24 PM(UTC)
Lansweeper Report on Machines with DNS servers other than X, Y, or Z
by  CyberCitizen   Go to last post Go to first unread
Last post: 10/27/2020 2:29:30 AM(UTC)
Lansweeper Last Patch Date
by  Dan S   Go to last post Go to first unread
Last post: 10/26/2020 2:27:47 PM(UTC)
Lansweeper Webcam report, the wrong way
by  TimHolmes1973   Go to last post Go to first unread
Last post: 10/23/2020 4:38:45 PM(UTC)