NetSight
IP …
high7.2

CVE-2015-5225

Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (he…

Impact

Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.

Affected products

VendorProductAffected versions
RedhatOpenstack
Versions 5.0, 6.0, 7.0
FedoraprojectFedora
Versions 21, 22, 23
QemuQemu
through 2.4.0

Weakness classification

CWE-119

References