PT-2017-14060 · Opera+7 · Opera+7

Nick Wellnhofer · Published 2017-12-06 · Updated 2026-03-13 · CVE-2017-15412

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.5 Google Chrome versions prior to 63.0.3239.84

Description A use after free issue in libxml2 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This issue affects various products, including Google Chrome and Opera.

Recommendations For libxml2 versions prior to 2.9.5, update to version 2.9.5 or later to resolve the issue. For Google Chrome versions prior to 63.0.3239.84, update to version 63.0.3239.84 or later to resolve the issue.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2017-2813

ALT-PU-2019-1924

ALT-PU-2019-3079

CESA-2020_1190

CVE-2017-15412

DLA-1211-1

DSA-4086-1

GHSA-R58R-74GX-6WX3

MGASA-2018-0048

MGASA-2018-0050

OPENSUSE-SU-2017:3245-1

OPENSUSE-SU-2017_3244-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:11340-1

OPENSUSE-SU-2024:11912-1

OPENSUSE-SU-2024:12948-1

OPENSUSE-SU-2024:13165-1

OPENSUSE-SU-2024:14174-1

OPENSUSE-SU-2025:14697-1

OPENSUSE-SU-2026:10356-1

RHSA-2017:3401

RHSA-2017_3401

RHSA-2020:1190

RHSA-2020_1190

SUSE-SU-2018:0395-1

SUSE-SU-2018:0401-1

USN-3513-1

USN-3513-2

Affected Products

Alt Linux

Centos

Google Chrome

Opera

Red Hat

Suse

Ubuntu

Libxml2

References · 2414

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2017-15412.yml · Exploit
• 🔥 https://bugs.chromium.org/p/chromium/issues/detail?id=727039 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-15412 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2017:3245-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:3401 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-15412 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0048.html · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-15412 · Security Note
• https://osv.dev/vulnerability/USN-3513-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-15412 · Vendor Advisory
• https://debian.org/security/2018/dsa-4086 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-15412 · Vendor Advisory
• https://security.gentoo.org/glsa/201801-03 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4086-1 · Vendor Advisory