CVE-2017-5130
CVE-2017-5130
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.
CVSS 8.8 · Alta · EPSS 2,7% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
google chrome prior to 62.0.3202.62
- Versiones
- Google Chrome prior to 62.0.3202.62: Afectada
Sin corrección publicada
libxml2 Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.9.4+dfsg1-5.1
Actualiza a 2.9.4+dfsg1-5.1
libxml2 Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.9.4+dfsg1-5.1
Actualiza a 2.9.4+dfsg1-5.1
libxml2 Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.9.4+dfsg1-5.1
Actualiza a 2.9.4+dfsg1-5.1
chromium-browser Ubuntu:14.04:LTS
- Versiones
- 29.0.1547.65-0ubuntu2
- 31.0.1650.63-0ubuntu1~20131204.1
- 32.0.1700.107-0ubuntu1~20140204.977.1
- 33.0.1750.152-0ubuntu1~pkg995.1
- 34.0.1847.116-0ubuntu2
- 36.0.1985.125-0ubuntu1.14.04.0~pkg1029
- 37.0.2062.94-0ubuntu0.14.04.1~pkg1042
- 37.0.2062.120-0ubuntu0.14.04.1~pkg1049
- 38.0.2125.111-0ubuntu0.14.04.1.1061
- 39.0.2171.65-0ubuntu0.14.04.1.1064
- 40.0.2214.94-0ubuntu0.14.04.1.1068
- 40.0.2214.111-0ubuntu0.14.04.1.1069
- 41.0.2272.76-0ubuntu0.14.04.1.1076
- 43.0.2357.81-0ubuntu0.14.04.1.1089
- 43.0.2357.130-0ubuntu0.14.04.1.1092
- 44.0.2403.89-0ubuntu0.14.04.1.1095
- 45.0.2454.85-0ubuntu0.14.04.1.1097
- 45.0.2454.101-0ubuntu0.14.04.1.1099
- 47.0.2526.73-0ubuntu0.14.04.1.1106
- 47.0.2526.106-0ubuntu0.14.04.1.1107
- 48.0.2564.82-0ubuntu0.14.04.1.1108
- 48.0.2564.116-0ubuntu0.14.04.1.1111
- 49.0.2623.87-0ubuntu0.14.04.1.1112
- 49.0.2623.108-0ubuntu0.14.04.1.1113
- 50.0.2661.102-0ubuntu0.14.04.1.1117
- 51.0.2704.79-0ubuntu0.14.04.1.1121
- 52.0.2743.116-0ubuntu0.14.04.1.1134
- 53.0.2785.143-0ubuntu0.14.04.1.1142
- 53.0.2785.143-0ubuntu0.14.04.1.1145
- 58.0.3029.81-0ubuntu0.14.04.1172
- 58.0.3029.96-0ubuntu0.14.04.1174
- 58.0.3029.110-0ubuntu0.14.04.1176
- 59.0.3071.109-0ubuntu0.14.04.1186
- 59.0.3071.109-0ubuntu0.14.04.1188
- 60.0.3112.78-0ubuntu0.14.04.1190
- 60.0.3112.113-0ubuntu0.14.04.1194
- 61.0.3163.79-0ubuntu0.14.04.1196
- 61.0.3163.100-0ubuntu0.14.04.1202
- Intervalos de versiones afectados
- ECOSYSTEM: < 62.0.3202.62-0ubuntu0.14.04.1204
Actualiza a 62.0.3202.62-0ubuntu0.14.04.1204
libxml2 Ubuntu:Pro:14.04:LTS
- Versiones
- 2.9.1+dfsg1-3ubuntu2
- 2.9.1+dfsg1-3ubuntu3
- 2.9.1+dfsg1-3ubuntu4
- 2.9.1+dfsg1-3ubuntu4.1
- 2.9.1+dfsg1-3ubuntu4.2
- 2.9.1+dfsg1-3ubuntu4.3
- 2.9.1+dfsg1-3ubuntu4.4
- 2.9.1+dfsg1-3ubuntu4.5
- 2.9.1+dfsg1-3ubuntu4.6
- 2.9.1+dfsg1-3ubuntu4.7
- 2.9.1+dfsg1-3ubuntu4.8
- 2.9.1+dfsg1-3ubuntu4.9
- 2.9.1+dfsg1-3ubuntu4.10
- 2.9.1+dfsg1-3ubuntu4.11
- 2.9.1+dfsg1-3ubuntu4.12
- 2.9.1+dfsg1-3ubuntu4.13
- 2.9.1+dfsg1-3ubuntu4.13+esm1
- 2.9.1+dfsg1-3ubuntu4.13+esm2
- 2.9.1+dfsg1-3ubuntu4.13+esm3
- 2.9.1+dfsg1-3ubuntu4.13+esm4
- 2.9.1+dfsg1-3ubuntu4.13+esm5
- 2.9.1+dfsg1-3ubuntu4.13+esm6
- 2.9.1+dfsg1-3ubuntu4.13+esm7
- 2.9.1+dfsg1-3ubuntu4.13+esm8
- 2.9.1+dfsg1-3ubuntu4.13+esm9
- 2.9.1+dfsg1-3ubuntu4.13+esm10
- 2.9.1+dfsg1-3ubuntu4.13+esm11
- 2.9.1+dfsg1-3ubuntu4.13+esm12
- 2.9.1+dfsg1-3ubuntu4.13+esm13
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
chromium-browser Ubuntu:16.04:LTS
- Versiones
- 45.0.2454.101-0ubuntu1.1201
- 47.0.2526.73-0ubuntu1.1218
- 47.0.2526.106-0ubuntu1.1221
- 48.0.2564.82-0ubuntu1.1222
- 48.0.2564.116-0ubuntu1.1229
- 49.0.2623.87-0ubuntu1.1232
- 49.0.2623.108-0ubuntu1.1233
- 50.0.2661.102-0ubuntu0.16.04.1.1237
- 51.0.2704.79-0ubuntu0.16.04.1.1242
- 52.0.2743.116-0ubuntu0.16.04.1.1250
- 53.0.2785.143-0ubuntu0.16.04.1.1254
- 53.0.2785.143-0ubuntu0.16.04.1.1257
- 55.0.2883.87-0ubuntu0.16.04.1263
- 56.0.2924.76-0ubuntu0.16.04.1268
- 57.0.2987.98-0ubuntu0.16.04.1276
- 58.0.3029.81-0ubuntu0.16.04.1277
- 58.0.3029.96-0ubuntu0.16.04.1279
- 58.0.3029.110-0ubuntu0.16.04.1281
- 59.0.3071.109-0ubuntu0.16.04.1289
- 59.0.3071.109-0ubuntu0.16.04.1291
- 60.0.3112.78-0ubuntu0.16.04.1293
- 60.0.3112.113-0ubuntu0.16.04.1298
- 61.0.3163.79-0ubuntu0.16.04.1300
- 61.0.3163.100-0ubuntu0.16.04.1306
- Intervalos de versiones afectados
- ECOSYSTEM: < 62.0.3202.62-0ubuntu0.16.04.1308
Actualiza a 62.0.3202.62-0ubuntu0.16.04.1308
libxml2 Ubuntu:Pro:16.04:LTS
- Versiones
- 2.9.2+zdfsg1-4
- 2.9.2+zdfsg1-4ubuntu1
- 2.9.2+zdfsg1-4ubuntu2
- 2.9.2+zdfsg1-4ubuntu3
- 2.9.3+dfsg1-1
- 2.9.3+dfsg1-1ubuntu0.1
- 2.9.3+dfsg1-1ubuntu0.2
- 2.9.3+dfsg1-1ubuntu0.3
- 2.9.3+dfsg1-1ubuntu0.4
- 2.9.3+dfsg1-1ubuntu0.5
- 2.9.3+dfsg1-1ubuntu0.6
- 2.9.3+dfsg1-1ubuntu0.7
- 2.9.3+dfsg1-1ubuntu0.7+esm1
- 2.9.3+dfsg1-1ubuntu0.7+esm2
- 2.9.3+dfsg1-1ubuntu0.7+esm3
- 2.9.3+dfsg1-1ubuntu0.7+esm4
- 2.9.3+dfsg1-1ubuntu0.7+esm5
- 2.9.3+dfsg1-1ubuntu0.7+esm6
- 2.9.3+dfsg1-1ubuntu0.7+esm7
- 2.9.3+dfsg1-1ubuntu0.7+esm8
- 2.9.3+dfsg1-1ubuntu0.7+esm9
- 2.9.3+dfsg1-1ubuntu0.7+esm10
- 2.9.3+dfsg1-1ubuntu0.7+esm11
- 2.9.3+dfsg1-1ubuntu0.7+esm12
- 2.9.3+dfsg1-1ubuntu0.7+esm13
- 2.9.3+dfsg1-1ubuntu0.7+esm14
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
oxide-qt Ubuntu:16.04:LTS
- Versiones
- 1.9.5-0ubuntu1
- 1.10.3-0ubuntu0.15.10.1
- 1.10.3-0ubuntu0.15.10.2
- 1.11.3-0ubuntu3
- 1.11.4-0ubuntu1
- 1.11.5-0ubuntu1
- 1.12.5-0ubuntu1
- 1.12.6-0ubuntu1
- 1.12.7-0ubuntu1
- 1.13.6-0ubuntu1
- 1.14.7-0ubuntu1
- 1.14.9-0ubuntu0.16.04.1
- 1.15.7-0ubuntu0.16.04.1
- 1.15.8-0ubuntu0.16.04.1
- 1.16.5-0ubuntu0.16.04.1
- 1.17.7-0ubuntu0.16.04.1
- 1.17.9-0ubuntu0.16.04.1
- 1.18.3-0ubuntu0.16.04.1
- 1.18.5-0ubuntu0.16.04.1
- 1.19.4-0ubuntu0.16.04.1
- 1.20.4-0ubuntu0.16.04.1
- 1.21.5-0ubuntu0.16.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
chromium-browser Ubuntu:18.04:LTS
- Versiones
- 61.0.3163.100-0ubuntu1.1378
- Intervalos de versiones afectados
- ECOSYSTEM: < 62.0.3202.62-0ubuntu0.17.10.1380
Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
libxml2 Ubuntu:18.04:LTS
- Versiones
- 2.9.4+dfsg1-4ubuntu1
- 2.9.4+dfsg1-5ubuntu1
- 2.9.4+dfsg1-5ubuntu2
- 2.9.4+dfsg1-5.1ubuntu1
- 2.9.4+dfsg1-5.2ubuntu1
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.9.4+dfsg1-6.1ubuntu1
Actualiza a 2.9.4+dfsg1-6.1ubuntu1
Fuentes originales
- http://www.securityfocus.com/bid/101482
- https://lists.debian.org/debian-lts-announce/2017/11/msg00034.html
- http://bugzilla.gnome.org/show_bug.cgi?id=783026
- https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
- https://git.gnome.org/browse/libxml2/commit/?id=897dffbae322b46b83f99a607d527058a72c51ed
- https://access.redhat.com/errata/RHSA-2017:2997
- https://crbug.com/722079
- https://security.gentoo.org/glsa/201710-24
- https://security.netapp.com/advisory/ntap-20190719-0001/
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html
- https://nvd.nist.gov/vuln/detail/CVE-2017-5130