CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

CVE details

CVE-2015-5225

Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.

Score
7.2 high
Published
2015-11-06
Links
NVD · cve.org

Affected ports (1)

PortPackageVersionStatusMaintainer
emulators/qemu-cheriqemu-cheri0.d20260108unaddressedbrooks@FreeBSD.org

VuXML

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>qemu-cheri</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>Buffer overflow in the vnc_refresh_server_surface function in the VNC
	display driver in QEMU before 2.4.0.1 allows guest users to cause a
	denial of service (heap memory corruption and process crash) or
	possibly execute arbitrary code on the host via unspecified vectors,
	related to refreshing the server display surface.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2015-5225</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2015-5225</url>
    </references>
    <dates>
      <discovery>2015-11-06</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>