suse · CVE-2017-15412

Quick triage

Priority: medium Published: 2021-05-30 14:03:17 UTC Updated: 2026-04-17 15:52:19 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-15412 severity moderate: SUSE including 290 source package names (0.9.1:libxml2-2-2.9.4-46.12.1, 1.0.0:libxml2-2-2.9.4-46.12.1, …), 387 product×package rows across 75 product lines (Container caasp/v4/default-http-backend, Container caasp/v4/dnsmasq-nanny, … (75 product lines)): Known Affected 231, Fixed 150, Known Not Affected 6.

Description:

Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

cvelogic Threat Intelligence