CVE-2015-5225

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-11-06 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.

Affected products

Fedoraproject Fedora: 21, 22, 23
QEMU: through 2.4.0
OpenStack: 5.0, 6.0, 7.0

References

http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165484.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166798.html
http://rhn.redhat.com/errata/RHSA-2015-1772.html
http://rhn.redhat.com/errata/RHSA-2015-1837.html
http://www.debian.org/security/2015/dsa-3348
http://www.openwall.com/lists/oss-security/2015/08/21/6
http://www.securityfocus.com/bid/76506
http://www.securitytracker.com/id/1033547
https://lists.gnu.org/archive/html/qemu-devel/2015-08/msg02495.html
https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg05832.html
https://security.gentoo.org/glsa/201602-01

Get alerted when CVE-2015-5225 or the next vulnerability affects your stack