Use after free in Google Chrome prior to 63.0.3239.84 unknown
Priority MEDIUM 43CWE-416Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 14 fixed, 3 without a fix
Attack profile from CVSS 3.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-416 and the CVSS impact.
Summary
Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Why it matters now
EPSS 0.02938 87th percentileScored 2026-11-07
Fix Partial nokogiri (RubyGems): 1.8.2Red Hat: 3 advisoriesRed Hat: 14 fixed, 3 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Google Chrome prior to 63.0.3239.84 unknown | Google Chrome prior to 63.0.3239.84 unknown | — | No fix listed | CNA |
| — | nokogiri (RubyGems) | before 1.8.2 | 1.8.2 | Patch available | GHSA-r58r-74gx-6wx3 |
- Google Chrome prior to 63.0.3239.84 unknown Vendor— Affected Google Chrome prior to 63.0.3239.84 unknown Fixed in — No fix listed CNA
- nokogiri (RubyGems) Vendor— Affected before 1.8.2 Fixed in 1.8.2 Patch available GHSA-r58r-74gx-6wx3
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Debian |
| cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | before 63.0.3239.84 | Vulnerable | |
| cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* | before 2.9.5 | Vulnerable | xmlsoft |
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions before 63.0.3239.84 Vulnerable ·Google
- cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* Versions before 2.9.5 Vulnerable ·xmlsoft
Remediation
- Fix · GHSA-r58r-74gx-6wx3 nokogiri (RubyGems) Fixed in 1.8.2 Advisory →
Red Hat 3 advisories
- RHSA-2020:1190 Released 2020-03-31 · Red Hat rating Moderatelibxml2 security update
- Red Hat Enterprise Linux Client (v. 7) libxml2-2.9.1-6.el7.4, libxml2-python-2.9.1-6.el7.4
- Red Hat Enterprise Linux Client Optional (v. 7) libxml2-devel-2.9.1-6.el7.4, libxml2-static-2.9.1-6.el7.4
- Red Hat Enterprise Linux ComputeNode (v. 7) libxml2-2.9.1-6.el7.4, libxml2-python-2.9.1-6.el7.4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libxml2-devel-2.9.1-6.el7.4, libxml2-static-2.9.1-6.el7.4
- Red Hat Enterprise Linux Server (v. 7) libxml2-2.9.1-6.el7.4, libxml2-2.9.1-6.el7.4.ppc, libxml2-devel-2.9.1-6.el7.4 +2
- Red Hat Enterprise Linux Server Optional (v. 7) libxml2-static-2.9.1-6.el7.4, libxml2-static-2.9.1-6.el7.4.ppc
- Red Hat Enterprise Linux Workstation (v. 7) libxml2-2.9.1-6.el7.4, libxml2-devel-2.9.1-6.el7.4, libxml2-python-2.9.1-6.el7.4
- Red Hat Enterprise Linux Workstation Optional (v. 7) libxml2-static-2.9.1-6.el7.4
- RHSA-2018:0287 Released 2018-02-08 · Red Hat rating ImportantRed Hat JBoss Core Services Apache HTTP Server 2.4.23 security update
- Red Hat JBoss Core Services
- RHSA-2017:3401 Released 2017-12-07 · Red Hat rating Criticalchromium-browser security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-63.0.3239.84-1.el6_9
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-63.0.3239.84-1.el6_9
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-63.0.3239.84-1.el6_9
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Google Chrome prior to 63.0.3239.84 unknown — RHSA-2017:3401
18 records Highest priority Priority MEDIUM 7 MEDIUM, 11 LOW
Other records, highest priority first
- TI-2017-11319 Out-of-bounds write in Google Chrome prior to 63.0.3239.84 unknownPriority MEDIUM 43
- TI-2017-11325 Incorrect type conversion in Google Chrome prior to 63.0.3239.84 unknownPriority MEDIUM 41
- TI-2017-11323 Use after free in Google Chrome prior to 63.0.3239.84 unknownPriority MEDIUM 41
- Advisory ·
Google Chrome prior to 63.0.3239.84 unknown — GLSA-201801-03
18 records Highest priority Priority MEDIUM 7 MEDIUM, 11 LOW
Other records, highest priority first
- TI-2017-11319 Out-of-bounds write in Google Chrome prior to 63.0.3239.84 unknownPriority MEDIUM 43
- TI-2017-11325 Incorrect type conversion in Google Chrome prior to 63.0.3239.84 unknownPriority MEDIUM 41
- TI-2017-11323 Use after free in Google Chrome prior to 63.0.3239.84 unknownPriority MEDIUM 41
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 8 | Affected | No fix yet |
| Red Hat JBoss Enterprise Web Server 3 | Affected | No fix planned: Will not fix |
| Red Hat Ansible Tower 3.5 for RHEL 7 Server | Fixed | — |
| Red Hat Ansible Tower 3.6 for RHEL 7 | Fixed | — |
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2020:1190 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2020:1190 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2020:1190 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2020:1190 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 6) | Fixed | RHSA-2017:3401 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2020:1190 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2020:1190 |
| Red Hat Enterprise Linux Server Supplementary (v. 6) | Fixed | RHSA-2017:3401 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2020:1190 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2020:1190 |
| Red Hat Enterprise Linux Workstation Supplementary (v. 6) | Fixed | RHSA-2017:3401 |
| Red Hat JBoss Core Services | Fixed | RHSA-2018:0287 |
Not affected: 1 product
- Red Hat Enterprise Linux 8
Timeline
- 2026-10-02 Threatist record created from CVE-2017-15412
- 2026-10-03 Alias added: GHSA-r58r-74gx-6wx3
References
Advisory 5
Other 7
- https://crbug.com/727039
- https://bugzilla.gnome.org/show_bug.cgi?id=783160
- [debian-lts-announce] 20171218 [SECURITY] [DLA 1211-1] libxml2 security update
- https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html
- https://github.com/sparklemotion/nokogiri/issues/1714
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2017-15412.yml
- https://web.archive.org/web/20201208155618/http://www.securitytracker.com/id/1040348
Sources
- CVE-2017-15412 · CVE Program
- CVE-2017-15412 · NVD
- FIRST EPSS
- GHSA-r58r-74gx-6wx3 · GitHub Advisory Database · CC BY 4.0
- CVE-2017-15412 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences