Vulnerability in Xen

CVE-2015-0361

Use-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a denial of service (system crash) via a crafted hypercall during HVM guest teardown.

EPSS: 0.025 (83.2th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 4.2.0, 4.2.1, 4.2.2
  • Opensuse — versions 13.1, 13.2
  • N/a — versions n/a

References