Most recent entries from all

bdu:2019-01871

Withdrawn: BELL-CVE-2018-20815 — CVE-2018-20815 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-70440

fkie_cve-2018-20815

In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.

GHSA-4g35-fx39-gwjh

In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.

gsd-2018-20815

RHSA-2019:1175 — Red Hat Security Advisory: virt:rhel security update

hardware: Microarchitectural Store Buffer Data Sampling (MSBDS) hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS) hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS) QEMU: device_tree: heap buffer overflow while loading device tree blob libssh2: Integer overflow in transport read resulting in out of bounds write libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

RHSA-2019:1667 — Red Hat Security Advisory: qemu-kvm-rhev security update

QEMU: device_tree: heap buffer overflow while loading device tree blob

SUSE-SU-2019:1268-1 — Security update for qemu

Security update for qemu

UBUNTU-CVE-2018-20815

Affected: Ubuntu:14.04:LTS: qemu, Ubuntu:16.04:LTS: qemu, Ubuntu:18.04:LTS: qemu

In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.

WID-SEC-W-2024-1988 — QEMU: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes

Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.