CVE-2015-5225: Buffer Overflow
Buffer overflow in the vncrefreshserversurface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5225?
CVE-2015-5225 has a severity rating that indicates it could lead to denial of service and potential arbitrary code execution.
How do I fix CVE-2015-5225?
To fix CVE-2015-5225, update QEMU to version 2.4.0.1 or later.
Which software is affected by CVE-2015-5225?
CVE-2015-5225 affects several versions of QEMU, Red Hat OpenStack 5.0, 6.0, and 7.0, and Fedora versions 21, 22, and 23.
What kind of issue does CVE-2015-5225 cause?
CVE-2015-5225 causes a buffer overflow leading to heap memory corruption and potential process crashes.
Can CVE-2015-5225 be exploited remotely?
Yes, CVE-2015-5225 can be exploited by guest users to impact the host system.