CVE-2018-20815

Description

In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.

Link	Tags
https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=da885fe1ee8b4589047484bd7fa05a4905b52b17
https://access.redhat.com/errata/RHSA-2019:1667	vendor advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/	vendor advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/	vendor advisory
https://access.redhat.com/errata/RHSA-2019:1723	vendor advisory
https://access.redhat.com/errata/RHSA-2019:1743	vendor advisory
https://access.redhat.com/errata/RHSA-2019:1881	vendor advisory
https://access.redhat.com/errata/RHSA-2019:1968	vendor advisory
https://access.redhat.com/errata/RHSA-2019:2507	vendor advisory
https://access.redhat.com/errata/RHSA-2019:2553	vendor advisory
https://seclists.org/bugtraq/2019/Aug/41	mailing list
https://www.debian.org/security/2019/dsa-4506	vendor advisory

What is the severity of CVE-2018-20815?: CVE-2018-20815 has been scored as a critical severity vulnerability.
How to fix CVE-2018-20815?: To fix CVE-2018-20815, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2018-20815 being actively exploited in the wild?: It is possible that CVE-2018-20815 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~2% probability that this vulnerability will be exploited by malicious actors in the next 30 days.