NVD

Id
26439  
Name
CVE-2015-5225  
Description
Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-11-06  
Modified Date
2015-11-09  
Seq
2015-5225  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
139791 26439 CVE-2015-5225 FEDORA-2015-16368  View
139792 26439 CVE-2015-5225 FEDORA-2015-14783  View
139793 26439 CVE-2015-5225 FEDORA-2015-15364  View
139794 26439 CVE-2015-5225 RHSA-2015:1772  View
139795 26439 CVE-2015-5225 RHSA-2015:1837  View
139796 26439 CVE-2015-5225 [oss-security] 20150822 CVE-2015-5225 Qemu: ui: vnc: heap memory corruption issue  View
139797 26439 CVE-2015-5225 76506  View
139798 26439 CVE-2015-5225 1033547  View
139799 26439 CVE-2015-5225 [Qemu-devel] 20150821 [PATCH] vnc: fix memory corruption (CVE-2015-5225)  View
139800 26439 CVE-2015-5225 [Qemu-deve] 20150915 [ANNOUNCE] QEMU 2.4.0.1 CVE update released  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10459 JVNDB-2015-005779 QEMU の VNC ディスプレイドライバの vnc_refresh_server_surface 関数におけるバッファオーバーフローの脆弱性 QEMU の VNC ディスプレイドライバの vnc_refresh_server_surface 関数には、サーバディスプレイのサーフェスのリフレッシュに関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2015-5225 82450 CVE-2015-5225 26439 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005779.html 2015-08-21 2015-11-10 View