CVE:CVE-2013-4535
CNNVD:CNNVD-202002-445
QEMU（Quick Emulator）是法国法布里斯-贝拉（Fabrice Bellard）软件开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU 1.7.2之前版本中的hw/virtio/virtio.c文件中的‘virtqueue_map_sg’函数存在输入验证错误漏洞。攻击者可利用该漏洞读取任意文件。
solution:Upgrade qemu qemu to a higher version than 1.7.2,and avoid the version (,1.7.2); Upgrade redhat virtualization to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_tus to a higher version than 6.5,and avoid the version 6.5; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0