CVE:CVE-2018-7858
CNNVD:CNNVD-201803-331
QEMU（又名Quick Emulator）是法国程序员法布里斯-贝拉（Fabrice Bellard）所研发的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
基于Cirrus CLGD 54xx VGA Emulator支持实现的QEMU中存在安全漏洞。本地攻击者可利用该漏洞造成拒绝服务（越边界访问和进程崩溃）。
solution:Upgrade qemu qemu to a higher version than 2.11.2,and avoid the version (,2.11.2]; Upgrade opensuse leap to a higher version than 42.3,and avoid the version 42.3; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.5,7.6,and avoid the version 7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10