CVE-2015-5225

Published: Nov 6, 2015Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.

Affected (7)

Products: Redhat: Openstack · Fedoraproject: Fedora · Qemu: Qemu

1 product

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Openstack	Version 5.0
Redhat Openstack	Version 6.0
Redhat Openstack	Version 7.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 21
Fedoraproject Fedora	Version 22
Fedoraproject Fedora	Version 23

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Qemu Qemu	Up to 2.4.0

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (24)

http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165484.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166798.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-1772.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-1837.html

Source: secalert@redhat.com

http://www.debian.org/security/2015/dsa-3348

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2015/08/21/6

Source: secalert@redhat.com

http://www.securityfocus.com/bid/76506

Source: secalert@redhat.com

http://www.securitytracker.com/id/1033547

Source: secalert@redhat.com

https://lists.gnu.org/archive/html/qemu-devel/2015-08/msg02495.html

Source: secalert@redhat.com

https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg05832.html

Source: secalert@redhat.com

PatchVendor Advisory

https://security.gentoo.org/glsa/201602-01

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165484.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166798.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-1772.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-1837.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3348

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2015/08/21/6

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/76506

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1033547

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.gnu.org/archive/html/qemu-devel/2015-08/msg02495.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg05832.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://security.gentoo.org/glsa/201602-01

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.