CVE:CVE-2013-4540
CNNVD:CNNVD-201411-068
QEMU（又名Quick Emulator）是法国程序员法布里斯-贝拉（Fabrice Bellard）所研发的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU 1.7.2之前版本的scoop_gpio_handler_update中存在缓冲区溢出漏洞。远程攻击者可借助savevm图像中特制的‘prev_level’、‘gpio_level’或‘gpio_dir’值利用该漏洞执行任意代码。
solution:Upgrade qemu qemu to a higher version than 1.7.1,0.1.0,0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6,0.2.0,0.3.0,0.4.0,0.4.1,0.4.2,0.4.3,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.6.0,0.6.1,0.7.0,0.7.1,0.7.2,0.8.0,0.8.1,0.8.2,0.9.0,0.9.1,0.9.1-5,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.11.0,0.11.0:rc0,0.11.0:rc1,0.11.0:rc2,0.11.0-rc0,0.11.0-rc1,0.11.0-rc2,0.11.1,0.12.0,0.12.0:rc1,0.12.0:rc2,0.12.1,0.12.2,0.12.3,0.12.4,0.12.5,0.13.0,0.13.0:rc0,0.13.0:rc1,0.14.0,0.14.0:rc0,0.14.0:rc1,0.14.0:rc2,0.14.1,0.15.0:rc1,0.15.0:rc2,0.15.1,0.15.2,1.0,1.0:rc1,1.0:rc2,1.0:rc3,1.0:rc4,1.0.1,1.1,1.1:rc1,1.1:rc2,1.1:rc3,1.1:rc4,1.4.1,1.4.2,1.5.0,1.5.0:rc1,1.5.0:rc2,1.5.0:rc3,1.5.1,1.5.2,1.5.3,1.6.0,1.6.0:rc1,1.6.0:rc2,1.6.0:rc3,1.6.1,1.6.2,and avoid the version (,1.7.1],0.1.0,0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6,0.2.0,0.3.0,0.4.0,0.4.1,0.4.2,0.4.3,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.6.0,0.6.1,0.7.0,0.7.1,0.7.2,0.8.0,0.8.1,0.8.2,0.9.0,0.9.1,0.9.1-5,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.11.0,0.11.0:rc0,0.11.0:rc1,0.11.0:rc2,0.11.0-rc0,0.11.0-rc1,0.11.0-rc2,0.11.1,0.12.0,0.12.0:rc1,0.12.0:rc2,0.12.1,0.12.2,0.12.3,0.12.4,0.12.5,0.13.0,0.13.0:rc0,0.13.0:rc1,0.14.0,0.14.0:rc0,0.14.0:rc1,0.14.0:rc2,0.14.1,0.15.0:rc1,0.15.0:rc2,0.15.1,0.15.2,1.0,1.0:rc1,1.0:rc2,1.0:rc3,1.0:rc4,1.0.1,1.1,1.1:rc1,1.1:rc2,1.1:rc3,1.1:rc4,1.4.1,1.4.2,1.5.0,1.5.0:rc1,1.5.0:rc2,1.5.0:rc3,1.5.1,1.5.2,1.5.3,1.6.0,1.6.0:rc1,1.6.0:rc2,1.6.0:rc3,1.6.1,1.6.2; Upgrade opensuse opensuse to a higher version than 12.3,13.1,and avoid the version 12.3,13.1