CVE-2018-20815 - OpenCVE

In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:N/C:P/I:P/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Qemu	Qemu

Configuration 1 [-]

cpe:2.3:a:qemu:qemu:3.1.0:*:*:*:*:*:*:*

References

Link	Resource
https://access.redhat.com/errata/RHSA-2019:1667
https://access.redhat.com/errata/RHSA-2019:1723
https://access.redhat.com/errata/RHSA-2019:1743
https://access.redhat.com/errata/RHSA-2019:1881
https://access.redhat.com/errata/RHSA-2019:1968
https://access.redhat.com/errata/RHSA-2019:2507
https://access.redhat.com/errata/RHSA-2019:2553
https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=da885fe1ee8b4589047484bd7fa05a4905b52b17
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/
https://seclists.org/bugtraq/2019/Aug/41
https://www.debian.org/security/2019/dsa-4506

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2019-05-31T21:40:01

Updated: 2019-08-26T14:06:15

Reserved: 2019-03-26T00:00:00

Link: CVE-2018-20815

JSON object: View

NVD Information

Status : Modified

Published: 2019-05-31T22:29:00.833

Modified: 2023-11-07T02:56:21.213

Link: CVE-2018-20815

JSON object: View

Redhat Information

No data.

CWE

CWE-119

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-08-26T14:06:15", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=da885fe1ee8b4589047484bd7fa05a4905b52b17"}, {"name": "RHSA-2019:1667", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2019:1667"}, {"name": "FEDORA-2019-52a8f5468e", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/"}, {"name": "FEDORA-2019-e9de40d53f", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/"}, {"name": "RHSA-2019:1723", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2019:1723"}, {"name": "RHSA-2019:1743", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2019:1743"}, {"name": "RHSA-2019:1881", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2019:1881"}, {"name": "RHSA-2019:1968", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2019:1968"}, {"name": "RHSA-2019:2507", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2019:2507"}, {"name": "RHSA-2019:2553", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2019:2553"}, {"name": "20190825 [SECURITY] [DSA 4506-1] qemu security update", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "https://seclists.org/bugtraq/2019/Aug/41"}, {"name": "DSA-4506", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "https://www.debian.org/security/2019/dsa-4506"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2018-20815", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=da885fe1ee8b4589047484bd7fa05a4905b52b17", "refsource": "MISC", "url": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=da885fe1ee8b4589047484bd7fa05a4905b52b17"}, {"name": "RHSA-2019:1667", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:1667"}, {"name": "FEDORA-2019-52a8f5468e", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/"}, {"name": "FEDORA-2019-e9de40d53f", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/"}, {"name": "RHSA-2019:1723", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:1723"}, {"name": "RHSA-2019:1743", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:1743"}, {"name": "RHSA-2019:1881", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:1881"}, {"name": "RHSA-2019:1968", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:1968"}, {"name": "RHSA-2019:2507", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2507"}, {"name": "RHSA-2019:2553", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2553"}, {"name": "20190825 [SECURITY] [DSA 4506-1] qemu security update", "refsource": "BUGTRAQ", "url": "https://seclists.org/bugtraq/2019/Aug/41"}, {"name": "DSA-4506", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2019/dsa-4506"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2018-20815", "datePublished": "2019-05-31T21:40:01", "dateReserved": "2019-03-26T00:00:00", "dateUpdated": "2019-08-26T14:06:15", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:qemu:qemu:3.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "27B0619A-AA3E-45D2-9B1E-8CC726BA51AE", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk."}, {"lang": "es", "value": "En QEMU versi\u00f3n 3.1.0, la funci\u00f3n load_device_tree en el archivo device_tree.c llama a la funci\u00f3n en desuso load_image, que tiene un riesgo de desbordamiento de b\u00fafer."}], "id": "CVE-2018-20815", "lastModified": "2023-11-07T02:56:21.213", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-05-31T22:29:00.833", "references": [{"source": "cve@mitre.org", "url": "https://access.redhat.com/errata/RHSA-2019:1667"}, {"source": "cve@mitre.org", "url": "https://access.redhat.com/errata/RHSA-2019:1723"}, {"source": "cve@mitre.org", "url": "https://access.redhat.com/errata/RHSA-2019:1743"}, {"source": "cve@mitre.org", "url": "https://access.redhat.com/errata/RHSA-2019:1881"}, {"source": "cve@mitre.org", "url": "https://access.redhat.com/errata/RHSA-2019:1968"}, {"source": "cve@mitre.org", "url": "https://access.redhat.com/errata/RHSA-2019:2507"}, {"source": "cve@mitre.org", "url": "https://access.redhat.com/errata/RHSA-2019:2553"}, {"source": "cve@mitre.org", "url": "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=da885fe1ee8b4589047484bd7fa05a4905b52b17"}, {"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/"}, {"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/"}, {"source": "cve@mitre.org", "url": "https://seclists.org/bugtraq/2019/Aug/41"}, {"source": "cve@mitre.org", "url": "https://www.debian.org/security/2019/dsa-4506"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}