CVE-2015-0565
Publication date 25 February 2020
Last updated 25 August 2025
Ubuntu priority
Description
NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| chromium-browser | 20.04 LTS focal | Not in release |
| 18.04 LTS bionic | Ignored | |
| 16.04 LTS xenial | Ignored | |
| 14.04 LTS trusty | Not in release |
Notes
alexmurray
The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur
starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap
seth-arnold
Marking this 'ignored'; Chromium's nacl may or may not still exist, but we'll trust Google to have handled this by now
Severity score breakdown
CVSS version: CVSS v3.0
Base score
10.0 · Critical
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H