Buffer overflow in QEMU - CVE-2015-5225
Published: August 5, 2020
Vulnerability identifier: #VU33990
CSH Severity: Medium
CVSS v4: 7.5 [CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-5225
CWE-ID: CWE-119
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the hypervisor.
Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.Affected software
QEMU
qemu (Alpine package)
qemu
Fedora
qemu (Alpine package)
qemu
Fedora
How to mitigate CVE-2015-5225
Install updates from vendor's website.
QEMU - update to 2.4.0.1
qemu (Alpine package) - update to 2.1.3-r3
qemu - addressed in versions 2.1.3-10.fc21, 2.3.1-2.fc22, 2.3.1-3.fc22, 2.4.0-2.fc23
qemu (Alpine package) - update to 2.1.3-r3
qemu - addressed in versions 2.1.3-10.fc21, 2.3.1-2.fc22, 2.3.1-3.fc22, 2.4.0-2.fc23
External References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165484.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166798.html
- http://rhn.redhat.com/errata/RHSA-2015-1772.html
- http://rhn.redhat.com/errata/RHSA-2015-1837.html
- http://www.debian.org/security/2015/dsa-3348
- http://www.openwall.com/lists/oss-security/2015/08/21/6
- http://www.securityfocus.com/bid/76506
- http://www.securitytracker.com/id/1033547
- https://lists.gnu.org/archive/html/qemu-devel/2015-08/msg02495.html
- https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg05832.html
- https://security.gentoo.org/glsa/201602-01