CVE:CVE-2016-3712
CNNVD:CNNVD-201605-191
QEMU（Quick Emulator）是法国法布里斯-贝拉（Fabrice Bellard）个人开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU存在输入验证错误漏洞。本地攻击者可通过在VBE模式中编辑VGA寄存器利用该漏洞造成拒绝服务。
solution:Upgrade oracle vm_server to a higher version than 3.3,3.4,and avoid the version 3.3,3.4; Upgrade qemu qemu to a higher version than 2.5.1,2.6.0:rc0,2.6.0:rc1,2.6.0:rc2,2.6.0:rc3,2.6.0:rc4,and avoid the version (,2.5.1],2.6.0:rc0,2.6.0:rc1,2.6.0:rc2,2.6.0:rc3,2.6.0:rc4; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,16.04,and avoid the version 12.04,14.04,15.10,16.04; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.3,7.4,7.6,7.7,and avoid the version 7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.3,7.4,7.5,7.6,7.7,and avoid the version 7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.3,7.6,7.7,and avoid the version 7.3,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade citrix xenserver to a higher version than 7.0,and avoid the version (,7.0]