CVE:CVE-2018-12617
CNNVD:CNNVD-201806-1102
QEMU（又名Quick Emulator）是法国程序员法布里斯-贝拉（Fabrice Bellard）所研发的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU 2.12.50及之前版本中的qemu-ga的qga/commands-posix.c和qga/commands-win32.c文件的qmp_guest_file_read例行程序存在整数溢出漏洞。攻击者可通过向代理发送特制的QMP命令利用该漏洞造成段错误。
solution:Upgrade qemu qemu to a higher version than 2.12.50,and avoid the version (,2.12.50]; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0