CVE:CVE-2014-7840
CNNVD:CNNVD-201411-512
QEMU（Quick Emulator）是法国法布里斯-贝拉（Fabrice Bellard）个人开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU存在输入验证错误漏洞，该漏洞源于程序没有正确处理RAM加载期间的值。远程攻击者可借助savevm数据中特制的值利用该漏洞执行任意代码。
solution:Upgrade qemu qemu to a higher version than 2.1.3,and avoid the version (,2.1.3]; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.3,7.4,7.5,7.6,7.7,and avoid the version 7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.3,7.4,7.6,7.7,and avoid the version 7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat virtualization to a higher version than 3.0,and avoid the version 3.0