CVE:CVE-2017-5973
CNNVD:CNNVD-201702-756
QEMU（又名Quick Emulator）是法国程序员法布里斯-贝拉（Fabrice Bellard）所研发的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU中的hw/usb/hcd-xhci.c文件的‘xhci_kick_epctx’函数存在安全漏洞。本地攻击者可利用该漏洞造成拒绝服务（无限循环和QEMU进程崩溃）。
solution:Upgrade qemu qemu to a higher version than 2.8.1.1,and avoid the version (,2.8.1.1]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat openstack to a higher version than 6.0,7.0,8,9,10,11,and avoid the version 6.0,7.0,8,9,10,11; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0