CVE-2015-5166

Publication date 12 August 2015

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which allows local HVM guest users to gain privileges by unplugging a block device twice.

Read the notes from the security team

Status

Package Ubuntu Release Status
qemu 15.04 vivid
Fixed 1:2.2+dfsg-5expubuntu9.4
14.10 utopic Ignored end of life
14.04 LTS trusty
Not affected
12.04 LTS precise Not in release
qemu-kvm 15.04 vivid Not in release
14.10 utopic Not in release
14.04 LTS trusty Not in release
12.04 LTS precise
Not affected
xen 15.04 vivid
Not affected
14.10 utopic Ignored end of life
14.04 LTS trusty Not in release
12.04 LTS precise
Not affected

Notes

mdeslaur

precise and trusty don't look affected

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
qemu

References

Related Ubuntu Security Notices (USN)

Other references