CVE-2017-15412

Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products

Alt Linux, Centos, Google Chrome, Opera, Red Hat, Suse, Ubuntu, Libxml2

Redhat Enterprise Linux Desktop

= 6.0

Redhat Enterprise Linux Server

= 6.0

Redhat Enterprise Linux Workstation

= 6.0

Fix

Available

CVSS 3.0

8.8 HIGH

EPSS

4.2% (90th percentile)

Weakness

CWE-416

NVD status

Modified

Published

2018-08-28