CVE:CVE-2017-7980
CNNVD:CNNVD-201704-1042
QEMU（又名Quick Emulator）是法国程序员法布里斯-贝拉（Fabrice Bellard）所研发的一套模拟处理器软件。该软件具有速度快、跨平台等特点。Cirrus CLGD 54xx VGA Emulator是其中的一个模拟器。
QEMU 2.8级之前的版本中的Cirrus CLGD 54xx VGA Emulator存在基于堆的缓冲区溢出漏洞。本地攻击者可利用该漏洞执行任意代码或造成拒绝服务（崩溃）。
solution:Upgrade qemu qemu to a higher version than 2.8,and avoid the version (,2.8]; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,16.10,17.04,and avoid the version 14.04,16.04,16.10,17.04; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat openstack to a higher version than 6.0,7.0,8,9,10,5.0,and avoid the version 6.0,7.0,8,9,10,5.0; Upgrade redhat virtualization to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.3,7.4,7.6,and avoid the version 7.3,7.4,7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.3,7.4,7.5,7.6,and avoid the version 7.3,7.4,7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.3,7.6,and avoid the version 7.3,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0