CVE:CVE-2018-17958
CNNVD:CNNVD-201810-481
QEMU（又名Quick Emulator）是法国程序员法布里斯-贝拉（Fabrice Bellard）所研发的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU中的hw/net/rtl8139.c文件的‘rtl8139_do_receive’函数存在缓冲区溢出漏洞，该漏洞源于程序使用了错误的整型数据。攻击者可利用该漏洞执行任意代码或造成拒绝服务。
solution:Upgrade qemu qemu to a higher version than 3.0.1,and avoid the version (,3.0.1]; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat virtualization_manager to a higher version than 4.3,and avoid the version 4.3