UBUNTU-CVE-2020-12801

    Dashboard / Vulnerabilities / UBUNTU-CVE-2020-12801

    UBUNTU-CVE-2020-12801

    Published: 18 May 2020Last Modified: 22 Apr 2026
    Upstream:
    CVE-2020-12801
    Aliases:
    USN-5694-1

    Summary:

    Details: If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.

    References: https://ubuntu.com/security/CVE-2020-12801, https://www.libreoffice.org/about-us/security/advisories/CVE-2020-12801, https://ubuntu.com/security/notices/USN-5694-1, https://www.cve.org/CVERecord?id=CVE-2020-12801

    Affected packages

    Package

    Name: libreoffice

    Purl: pkg:deb/ubuntu/libreoffice@1:6.0.7-0ubuntu0.18.04.12?arch=source&distro=bionic

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1:6.0.7-0ubuntu0.18.04.12

    Affected versions

    1:5.4.1-0ubuntu1
    1:5.4.1-0ubuntu3
    1:5.4.2-0ubuntu5
    1:5.4.3-0ubuntu1
    1:5.4.4-0ubuntu5

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2020-12801 | CVE-DB