CVE:CVE-2020-1711
CNNVD:CNNVD-202002-293
QEMU（Quick Emulator）是法国法布里斯-贝拉（Fabrice Bellard）软件开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU 4.2.1之前的2.12.0版本中的iSCSI Block驱动程序存在缓冲区错误漏洞。远程攻击者可利用该漏洞造成QEMU进程崩溃，导致拒绝服务或以QEMU进程的权限执行任意代码。
solution:Upgrade qemu qemu to a higher version than 4.2.1,and avoid the version [2.12.0,4.2.1); Upgrade redhat openstack to a higher version than 10,13,and avoid the version 10,13; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1