CVEvulnerability

CVE-2015-5225

7.2 HIGH Published 2015-11-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-11-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.

Affected configurations

• redhat openstack 5.0 • redhat openstack 6.0 • redhat openstack 7.0 • fedoraproject fedora 21 • fedoraproject fedora 22 • fedoraproject fedora 23 • qemu qemu (<= 2.4.0)

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References