CVE-2015-1317 - Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by deleting all WebContents while a RenderProcessHost instance still exists

Back Back to CVE browser

HIGH

Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by deleting all WebContents while a RenderProcessHost instance still exists

Published Apr 8, 2015

7.5

HIGH

CVSS 2.0

EPSS 2.96%

Description

Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by deleting all WebContents while a RenderProcessHost instance still exists.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://www.ubuntu.com/usn/USN-2556-1
vendor-advisoryx_refsource_UBUNTU
https://bugs.launchpad.net/oxide/+bug/1431484
x_refsource_CONFIRM

Link	Providers	Tags
http://www.ubuntu.com/usn/USN-2556-1		vendor-advisoryx_refsource_UBUNTU
https://bugs.launchpad.net/oxide/+bug/1431484		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner canonical

Published Apr 8, 2015

Updated Aug 6, 2024

Reserved Jan 22, 2015

Link CVE-2015-1317

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-1317

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-1317