CVE:CVE-2014-7815
CNNVD:CNNVD-201411-212
QEMU（又名Quick Emulator）是法国程序员法布里斯-贝拉（Fabrice Bellard）所研发的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU的ui/vnc.c文件中的‘set_pixel_format’函数中存在安全漏洞。远程攻击者可借助较小的‘bytes_per_pixel’值利用该漏洞造成拒绝服务（崩溃）。以下产品和版本受到影响：Ubuntu 14.10版本，14.04 LTS版本，12.04 LTS版本，10.04 LTS版本。
solution:Upgrade qemu qemu to a higher version than 2.1.3,and avoid the version (,2.1.3]; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.3,7.4,7.5,7.6,7.7,and avoid the version 7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.3,7.4,7.6,7.7,and avoid the version 7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat virtualization to a higher version than 3.0,and avoid the version 3.0; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,14.04,14.10,and avoid the version 10.04,12.04,14.04,14.10; Upgrade suse linux_enterprise_desktop to a higher version than 12,and avoid the version 12; Upgrade suse linux_enterprise_server to a higher version than 12,and avoid the version 12