Total vulnerabilities in the database
Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.
| Software | From | Fixed in |
|---|---|---|
| redhat / openstack | 5.0 | 5.0.x |
| redhat / openstack | 7.0 | 7.0.x |
| redhat / openstack | 6.0 | 6.0.x |
| fedoraproject / fedora | 22 | 22.x |
| fedoraproject / fedora | 23 | 23.x |
| fedoraproject / fedora | 21 | 21.x |
| qemu / qemu | - | 2.4.0.x |