CVE:CVE-2015-3214
CNNVD:CNNVD-201506-371
QEMU是法国Fabrice Bellard个人开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 2.6.33之前版本和QEMU 2.3.1之前版本存在缓冲区错误漏洞，该漏洞源于程序没有区分读长度和写长度。攻击者利用该漏洞在主机操作系统上执行任意代码。
solution:Upgrade qemu qemu to a higher version than 2.3.0,and avoid the version (,2.3.0]; Upgrade linux linux_kernel to a higher version than 2.6.32,and avoid the version (,2.6.32]; Upgrade arista eos to a higher version than 4.12,4.13,4.14,4.15,and avoid the version 4.12,4.13,4.14,4.15; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade lenovo emc_px12-400r_ivx to a higher version than 1.0.10.33264,and avoid the version (,1.0.10.33264); Upgrade lenovo emc_px12-450r_ivx to a higher version than 1.0.10.33264,and avoid the version (,1.0.10.33264); Upgrade redhat openstack to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat virtualization to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat enterprise_linux_compute_node_eus to a higher version than 7.1,7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 7.1,7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_for_power_big_endian to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_for_power_big_endian_eus to a higher version than 7.1_ppc64,7.2_ppc64,7.3_ppc64,7.4_ppc64,7.5_ppc64,7.6_ppc64,7.7_ppc64,and avoid the version 7.1_ppc64,7.2_ppc64,7.3_ppc64,7.4_ppc64,7.5_ppc64,7.6_ppc64,7.7_ppc64; Upgrade redhat enterprise_linux_for_scientific_computing to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.3,7.4,7.6,7.7,and avoid the version 7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.1,7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 7.1,7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server_from_rhui to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.3,7.6,7.7,and avoid the version 7.3,7.6,7.7; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 7.2,7.3,7.4,7.6,7.7,and avoid the version 7.2,7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0