CVE:CVE-2016-5403
CNNVD:CNNVD-201607-1035
QEMU（又名Quick Emulator）是法国程序员法布里斯-贝拉（Fabrice Bellard）所研发的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU中的hw/virtio/virtio.c文件中的‘virtqueue_pop’函数存在安全漏洞。本地攻击者可借助提交请求利用该漏洞造成拒绝服务（内存消耗和QEMU进程崩溃）。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,and avoid the version 12.04,14.04,16.04; Upgrade oracle linux to a higher version than 5,6,7,and avoid the version 5,6,7; Upgrade oracle vm_server to a higher version than 3.4,and avoid the version 3.4; Upgrade qemu qemu to a higher version than 2.6.0,2.7.0:rc0,and avoid the version (,2.6.0],2.7.0:rc0; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat openstack to a higher version than 5.0,6.0,7.0,8,9,and avoid the version 5.0,6.0,7.0,8,9; Upgrade redhat virtualization to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.2,7.3,7.6,7.7,and avoid the version 7.2,7.3,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0