CVE-2017-5130
Fixed in a distro release EPSS 3%CVSS 8.8
An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.
Products: google chrome, debian_linux, xmlsoft libxml2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | chromium | 62.0.3202.62-1 |
| Debian 12 | libxml2 | 2.9.4+dfsg1-5.1 |
| Debian 13 | libxml2 | 2.9.4+dfsg1-5.1 |
| Debian 14 | libxml2 | 2.9.4+dfsg1-5.1 |
| Debian 7 | libxml2 | 2.8.0+dfsg1-7+wheezy10 |
| Debian 9 | libxml2 | 2.9.4+dfsg1-2.2+deb9u6 |
| Red Hat rhel extras 6 | chromium-browser | 0:62.0.3202.62-2.el6_9 |
| Red Hat rhel extras 6 | chromium-browser-debuginfo | 0:62.0.3202.62-2.el6_9 |
| SUSE Linux Enterprise Desktop 12 SP2 | libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | python-libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | python-libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Server 11 SP4 | libxml2 | 2.7.6-0.77.10.1 |
| SUSE Linux Enterprise Server 11 SP4 | libxml2-python | 2.7.6-0.77.10.1 |
| SUSE Linux Enterprise Server 12 SP2 | libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Server 12 SP2 | python-libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Server 12 SP3 | libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Server 12 SP3 | python-libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | python-libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libxml2 | 2.7.6-0.77.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libxml2-python | 2.7.6-0.77.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | python-libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python-libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libxml2 | 2.7.6-0.77.10.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libxml2 | 2.9.4-46.12.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | libxml2 | 2.9.4-46.12.1 |
| SUSE Package Hub 12 SP2 | chromium | 63.0.3239.84-40.1 |
| Ubuntu 14.04 LTS | chromium-browser | 62.0.3202.62-0ubuntu0.14.04.1204 |
| Ubuntu 16.04 LTS | chromium-browser | 62.0.3202.62-0ubuntu0.16.04.1308 |
| Ubuntu 16.04 LTS | oxide-qt | no fix |
| Ubuntu 18.04 LTS | chromium-browser | 62.0.3202.62-0ubuntu0.17.10.1380 |
| Ubuntu 18.04 LTS | libxml2 | 2.9.4+dfsg1-6.1ubuntu1 |
| Ubuntu Pro 14.04 LTS | libxml2 | no fix |
| Ubuntu Pro 16.04 LTS | libxml2 | no fix |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |
| openSUSE Tumbleweed | chromium | 93.0.4577.82-1.1 |