vulnerability
Amazon Linux AMI: CVE-2017-15412: Security patch for libxml2 (ALAS-2020-1415)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | Dec 8, 2017 | Aug 13, 2020 | May 13, 2025 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Dec 8, 2017
Added
Aug 13, 2020
Modified
May 13, 2025
Description
Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Solution
amazon-linux-upgrade-libxml2
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.