{"id":"CVE-2018-20815","details":"In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.","modified":"2026-05-19T12:01:40.306970870Z","published":"2019-05-31T22:29:00.833Z","related":["SUSE-SU-2019:1238-1","SUSE-SU-2019:1239-1","SUSE-SU-2019:1268-1","SUSE-SU-2019:1269-1","SUSE-SU-2019:1272-1","SUSE-SU-2019:1348-1","SUSE-SU-2019:1349-1","SUSE-SU-2019:1371-1","SUSE-SU-2019:14052-1","SUSE-SU-2019:14053-1","SUSE-SU-2019:14063-1","SUSE-SU-2019:14201-1","openSUSE-SU-2019:1405-1","openSUSE-SU-2024:11287-1"],"database_specific":{},"references":[{"type":"WEB","url":"https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=da885fe1ee8b4589047484bd7fa05a4905b52b17"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/"},{"type":"WEB","url":"https://seclists.org/bugtraq/2019/Aug/41"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1667"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1723"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1743"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1881"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1968"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2507"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2553"},{"type":"ADVISORY","url":"https://www.debian.org/security/2019/dsa-4506"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/qemu/qemu","events":[{"introduced":"0"},{"last_affected":"32a1a94dd324d33578dca1dc96d7896a0244d768"}],"database_specific":{"source":"CPE_FIELD","cpe":"cpe:2.3:a:qemu:qemu:3.1.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"3.1.0"}]}}],"versions":["v3.1.0","v3.0.0","v3.1.0-rc5","v3.1.0-rc4","v3.1.0-rc3","v3.1.0-rc2","v3.1.0-rc1","v3.1.0-rc0","v3.0.0-rc4","v3.0.0-rc3","v3.0.0-rc2","v3.0.0-rc1","v3.0.0-rc0","v2.12.0","v2.12.0-rc4","v2.12.0-rc3","v2.12.0-rc2","v2.12.0-rc1","v2.12.0-rc0","v2.11.0","v2.11.0-rc5","v2.11.0-rc4","v2.11.0-rc3","v2.11.0-rc2","v2.11.0-rc1","v2.11.0-rc0","v2.10.0","v2.10.0-rc4","v2.10.0-rc3","v2.10.0-rc2","v2.10.0-rc1","v2.9.0","v2.10.0-rc0","v2.9.0-rc5","v2.9.0-rc4","v2.9.0-rc3","v2.9.0-rc2","v2.9.0-rc1","v2.8.0","v2.9.0-rc0","v2.8.0-rc4","v2.8.0-rc3","v2.8.0-rc2","v2.8.0-rc1","v2.8.0-rc0","v2.7.0","v2.7.0-rc5","v2.7.0-rc4","v2.7.0-rc3","v2.7.0-rc2","v2.6.0","v2.7.0-rc1","v2.7.0-rc0","v2.6.0-rc5","v2.6.0-rc4","v2.6.0-rc3","v2.6.0-rc2","v2.6.0-rc1","v2.6.0-rc0","v2.5.0","v2.5.0-rc4","v2.5.0-rc3","v2.5.0-rc2","v2.5.0-rc1","v2.5.0-rc0","v2.4.0","v2.4.0-rc4","v2.4.0-rc3","v2.3.0","v2.4.0-rc2","v2.4.0-rc1","v2.4.0-rc0","v2.3.0-rc4","v2.3.0-rc3","v2.3.0-rc2","v2.3.0-rc1","v2.3.0-rc0","v2.2.0","v2.2.0-rc3","v2.2.0-rc5","v2.2.0-rc4","v2.2.0-rc2","v2.2.0-rc1","v2.2.0-rc0","v2.1.0","v2.1.0-rc5","v2.1.0-rc4","v2.1.0-rc2","v2.1.0-rc3","v2.0.0","v2.1.0-rc1","v2.1.0-rc0","v2.0.0-rc3","v2.0.0-rc2","v2.0.0-rc1","v2.0.0-rc0","v1.7.0","v1.7.0-rc2","v1.7.0-rc1","v1.7.0-rc0","v1.6.0","v1.6.0-rc3","v1.6.0-rc2","v1.6.0-rc1","v1.6.0-rc0","v1.5.0","v1.5.0-rc3","v1.5.0-rc2","v1.5.0-rc1","v1.5.0-rc0","v1.4.0","v1.4.0-rc2","v1.4.0-rc1","v1.4.0-rc0","v1.3.0","v1.3.0-rc2","v1.3.0-rc1","v1.3.0-rc0","v1.2.0","v1.2.0-rc3","v1.2.0-rc2","v1.2.0-rc1","v1.2.0-rc0","v1.1.0","v1.1.0-rc4","v1.1.0-rc3","v1.1.0-rc2","v1.1-rc2","v1.1-rc1","v1.1-rc0","v1.0","v1.0-rc4","v1.0-rc3","v1.0-rc2","v1.0-rc1","v1.0-rc0","v0.14.0-rc0","v0.13.0-rc0","v0.12.0-rc0","v0.11.0-rc0","v0.5.0","v0.4.4","v0.4.3","v0.4.2","v0.4.1","v0.4.0","v0.3.0","v0.2.0","v0.1.6","v0.1.5","v0.1.4","v0.1.3","v0.1.1","v0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-20815.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}