CVE-2015-5166
12.08.2015, 14:59
Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which allows local HVM guest users to gain privileges by unplugging a block device twice.Enginsight
| Vendor | Product | Version |
|---|---|---|
| xen | xen | 𝑥 ≤ 4.5.0 |
| xen | xen | 4.5.1 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| qemu |
| ||||||||||||||||
| xen |
|
Ubuntu Releases
Common Weakness Enumeration
References