---
title: "CVE-2015-1221\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2015-1221?format=md
keywords: index, follow
---

# CVE-2015-1221

Publication date 8 March 2015

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Use-after-free vulnerability in Blink, as used in Google Chrome before
41.0.2272.76, allows remote attackers to cause a denial of service or
possibly have unspecified other impact by leveraging incorrect ordering of
operations in the Web SQL Database thread relative to Blink's main thread,
related to the shutdown function in web/WebKit.cpp.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| chromium-browser | 15.10 wily | Fixed 41.0.2272.76-0ubuntu1.1134 |
| 15.04 vivid | Fixed 41.0.2272.76-0ubuntu1.1134 |
| 14.10 utopic | Fixed 41.0.2272.76-0ubuntu0.14.10.1.1118 |
| 14.04 LTS trusty | Fixed 41.0.2272.76-0ubuntu0.14.04.1.1076 |
| 12.04 LTS precise | Ignored |
| 10.04 LTS lucid | Ignored end of life |
| oxide-qt | 15.10 wily | Fixed 1.5.5-0ubuntu1 |
| 15.04 vivid | Fixed 1.5.5-0ubuntu1 |
| 14.10 utopic | Fixed 1.5.5-0ubuntu0.14.10.2 |
| 14.04 LTS trusty | Fixed 1.5.5-0ubuntu0.14.04.3 |
| 12.04 LTS precise | Not in release |
| 10.04 LTS lucid | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1221)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2015-1221)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2015-1221)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2015-1221)

### Related Ubuntu Security Notices (USN)

+ [USN-2521-1](https://usn.ubuntu.com/USN-2521-1)
+ Oxide vulnerabilities
+ 10 March 2015

### Other references

* <https://src.chromium.org/viewvc/blink?revision=190035&view=revision>
* <https://src.chromium.org/viewvc/blink?revision=190021&view=revision>
* <https://code.google.com/p/chromium/issues/detail?id=455368>
* <http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html>
* <https://www.cve.org/CVERecord?id=CVE-2015-1221>