CVE-2015-1317

Published: Apr 8, 2015Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by deleting all WebContents while a RenderProcessHost instance still exists.

Affected (4)

Products: Canonical: Ubuntu Linux · Oxide Project: Oxide

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Oxide Project Oxide	Up to 1.5.5
Oxide Project Oxide	Version 1.6.0

References (4)

http://www.ubuntu.com/usn/USN-2556-1

Source: security@ubuntu.com

https://bugs.launchpad.net/oxide/+bug/1431484

Source: security@ubuntu.com

http://www.ubuntu.com/usn/USN-2556-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.launchpad.net/oxide/+bug/1431484

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.