CVE-2015-5166 PUBLISHED CVSS 7.199999809265137 HIGH

Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which allows local HVM guest users to gain privileges by unplugging a block device twice.

EPSS 0.07% · 21.8th percentile

Risk Scores

CVSS v2.0
7.199999809265137
EPSS Score
0.07%
21.8th percentile

Affected Products

VendorProductVersions
XENXen
fedoraprojectfedora21, 22
n/an/an/a
xenxen0, 4.5.1

Timeline

References

Open in Interactive Console →