SB2015090105 - Fedora 22 update for qemu
Published: September 1, 2015 Updated: April 24, 2025
Security Bulletin ID
SB2015090105
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Adjecent network
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Buffer overflow (CVE-ID: CVE-2015-5225)
The vulnerability allows a remote attacker to execute arbitrary code on the hypervisor.
Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.Remediation
Install update from vendor's website.