CVE-2014-7815

Description

The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.

Link	Tags
http://secunia.com/advisories/61484	third party advisory
http://rhn.redhat.com/errata/RHSA-2015-0624.html	third party advisory vendor advisory
http://secunia.com/advisories/62144	third party advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1157641	issue tracking third party advisory
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html	mailing list third party advisory vendor advisory
http://secunia.com/advisories/62143	third party advisory
http://rhn.redhat.com/errata/RHSA-2015-0349.html	third party advisory vendor advisory
http://www.debian.org/security/2014/dsa-3067	third party advisory vendor advisory
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e6908bfe8e07f2b452e78e677da1b45b1c0f6829
http://support.citrix.com/article/CTX200892	third party advisory
http://www.ubuntu.com/usn/USN-2409-1	third party advisory vendor advisory
http://www.debian.org/security/2014/dsa-3066	third party advisory vendor advisory

What is the severity of CVE-2014-7815?: CVE-2014-7815 has been scored as a medium severity vulnerability.
How to fix CVE-2014-7815?: To fix CVE-2014-7815, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2014-7815 being actively exploited in the wild?: It is possible that CVE-2014-7815 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~4% probability that this vulnerability will be exploited by malicious actors in the next 30 days.