Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-15412

Fixed in a distro release EPSS 3%

Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Published 2018-08-28 · CVE record · OSV

Products: redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, debian_linux, google chrome, xmlsoft libxml2

Fixed upstream

EcosystemPackageFixed in
RubyGemsnokogiri1.8.2

Distro releases

ReleasePackageFixed in
Amazon Linux 2libxml22.9.1-6.amzn2.4.1
Amazon Linux 2libxml2-devel2.9.1-6.amzn2.4.1
Amazon Linux 2libxml2-python2.9.1-6.amzn2.4.1
Amazon Linux 2libxml2-static2.9.1-6.amzn2.4.1
Arch Linuxchromium63.0.3239.84-1
Debian 12libxml22.9.4+dfsg1-5.2
Debian 13libxml22.9.4+dfsg1-5.2
Debian 14libxml22.9.4+dfsg1-5.2
Debian 7libxml22.8.0+dfsg1-7+wheezy12
Debian 8libxml22.9.1+dfsg1-5+deb8u6
Debian 9libxml22.9.4+dfsg1-2.2+deb9u2
Red Hat Enterprise Linux 7libxml20:2.9.1-6.el7.4
Red Hat Enterprise Linux 7libxml2-debuginfo0:2.9.1-6.el7.4
Red Hat Enterprise Linux 7libxml2-devel0:2.9.1-6.el7.4
Red Hat Enterprise Linux 7libxml2-python0:2.9.1-6.el7.4
Red Hat Enterprise Linux 7libxml2-static0:2.9.1-6.el7.4
Red Hat rhel extras 6chromium-browser0:63.0.3239.84-1.el6_9
Red Hat rhel extras 6chromium-browser-debuginfo0:63.0.3239.84-1.el6_9
SUSE Linux Enterprise Desktop 12 SP2libxml22.9.4-46.12.1
SUSE Linux Enterprise Desktop 12 SP2python-libxml22.9.4-46.12.1
SUSE Linux Enterprise Desktop 12 SP3libxml22.9.4-46.12.1
SUSE Linux Enterprise Desktop 12 SP3python-libxml22.9.4-46.12.1
SUSE Linux Enterprise Server 11 SP4libxml22.7.6-0.77.10.1
SUSE Linux Enterprise Server 11 SP4libxml2-python2.7.6-0.77.10.1
SUSE Linux Enterprise Server 12 SP2libxml22.9.4-46.12.1
SUSE Linux Enterprise Server 12 SP2python-libxml22.9.4-46.12.1
SUSE Linux Enterprise Server 12 SP3libxml22.9.4-46.12.1
SUSE Linux Enterprise Server 12 SP3python-libxml22.9.4-46.12.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2libxml22.9.4-46.12.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2python-libxml22.9.4-46.12.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4libxml22.7.6-0.77.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4libxml2-python2.7.6-0.77.10.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2libxml22.9.4-46.12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2python-libxml22.9.4-46.12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3libxml22.9.4-46.12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3python-libxml22.9.4-46.12.1
SUSE Linux Enterprise Software Development Kit 11 SP4libxml22.7.6-0.77.10.1
SUSE Linux Enterprise Software Development Kit 12 SP2libxml22.9.4-46.12.1
SUSE Linux Enterprise Software Development Kit 12 SP3libxml22.9.4-46.12.1
SUSE Package Hub 12 SP2chromium63.0.3239.84-40.1
Ubuntu 14.04 LTSchromium-browser63.0.3239.84-0ubuntu0.14.04.1
Ubuntu 14.04 LTSlibxml22.9.1+dfsg1-3ubuntu4.12
Ubuntu 16.04 LTSchromium-browser63.0.3239.84-0ubuntu0.16.04.1
Ubuntu 16.04 LTSlibxml22.9.3+dfsg1-1ubuntu0.5
Ubuntu 16.04 LTSoxide-qtno fix
Ubuntu 18.04 LTSchromium-browser63.0.3239.84-0ubuntu1
Ubuntu 18.04 LTSlibxml22.9.4+dfsg1-6.1ubuntu1
openSUSE Tumbleweedchromium113.0.5672.92-1.1
openSUSE Tumbleweedchromium93.0.4577.82-1.1
openSUSE Tumbleweedruby3.2-rubygem-nokogiri1.13.9-1.7
openSUSE Tumbleweedrubygem-nokogiri1.18.9-1.4
openSUSE Tumbleweedrubygem-nokogiri1.18.2-1.1
openSUSE Tumbleweedrubygem-nokogiri1.15.5-1.5
openSUSE Tumbleweedrubygem-nokogiri1.13.3-1.1