CVE:CVE-2018-7550
CNNVD:CNNVD-201803-030
QEMU（又名Quick Emulator）是法国程序员法布里斯-贝拉（Fabrice Bellard）所研发的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU中的hw/i386/multiboot.c文件的‘load_multiboot’函数存在安全漏洞。本地攻击者可借助大于mh_bss_end_addr的mh_load_end_addr值利用该漏洞在QEMU主机上执行任意代码。
solution:Upgrade qemu qemu to a higher version than 2.11.1,and avoid the version (,2.11.1]; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,18.04,and avoid the version 14.04,16.04,17.10,18.04; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,7.7,and avoid the version 7.6,7.7; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.5,7.6,7.7,and avoid the version 7.5,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,7.7,and avoid the version 7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0