CVE-2015-0361
Fixed in a distro release EPSS 3%
Use-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a denial of service (system crash) via a crafted hypercall during HVM guest teardown.
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xen | 4.4.1-7 |
| Debian 13 | xen | 4.4.1-7 |
| Debian 14 | xen | 4.4.1-7 |
| SUSE Linux Enterprise Desktop 12 | xen | 4.4.1_10-9.1 |
| SUSE Linux Enterprise Server 12 | xen | 4.4.1_10-9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | xen | 4.4.1_10-9.1 |
| SUSE Linux Enterprise Software Development Kit 12 | xen | 4.4.1_10-9.1 |
| Ubuntu 14.04 LTS | xen | 4.4.1-0ubuntu0.14.04.4 |