Read the docs
Red Hat Security Advisory

RHSA-2018:0287

Red Hat JBoss Core Services Apache HTTP Server 2.4.23 security update

Released 2018-02-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 43

Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02938 Published 2018-08-28 Partial fix · 1.8.2 CWE-416