CVE:CVE-2018-16872
CNNVD:CNNVD-201812-676
QEMU是法国程序员法布里斯-贝拉（Fabrice Bellard）所研发的一套模拟处理器软件。Media Transfer Protocol（MTP）是其中的一个媒体传输协议。
QEMU中的MTP存在安全漏洞。攻击者可利用该漏洞在QEMU进程的上下文中导航主机文件系统，进而读取该进程可访问的任意文件。
solution:Upgrade qemu qemu to a higher version than 3.1.0,and avoid the version (,3.1.0]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade opensuse leap to a higher version than 42.3,and avoid the version 42.3