This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page.
View CVE-2017-5130 →
UBUNTU-CVE-2017-5130
An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attack...
Original description
The description as published by the source.
An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Ubuntu:14.04:LTS
chromium-browser
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"62.0.3202.62-0ubuntu0.14.04.1204"}]}]
Ubuntu:Pro:14.04:LTS
libxml2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:16.04:LTS
chromium-browser
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"62.0.3202.62-0ubuntu0.16.04.1308"}]}]
Ubuntu:Pro:16.04:LTS
libxml2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:16.04:LTS
oxide-qt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:18.04:LTS
chromium-browser
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"62.0.3202.62-0ubuntu0.17.10.1380"}]}]
Ubuntu:18.04:LTS
libxml2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1"}]}]
References
- report ubuntu.com
- report chromereleases.googleblog.com
- report cve.org