FlawAtlas
Search the atlas
UBUNTU-CVE-2018-20815 Critical

UBUNTU-CVE-2018-20815

In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.

Exploit probability Not scored
Published December 31, 2018
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:14.04:LTS qemu

68 explicit affected versions

Ubuntu:16.04:LTS qemu

47 explicit affected versions

Ubuntu:18.04:LTS qemu

20 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities UBUNTU-CVE-2018-20815

In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.

View original source

05 / REFERENCES

Further evidence