CVE:CVE-2019-3812
CNNVD:CNNVD-201902-731
QEMU（Quick Emulator）是法国法布里斯-贝拉（Fabrice Bellard）软件开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU 2.10及之前版本和3.1.0及之前版本中的hw/i2c/i2c-ddc.c文件的‘i2c_ddc()’函数存在越界读取漏洞。本地攻击者可利用该漏洞读取栈内存。
solution:Upgrade qemu qemu to a higher version than 3.1.0,and avoid the version [2.10.0,3.1.0]; Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30; Upgrade canonical ubuntu_linux to a higher version than 18.04,18.10,and avoid the version 18.04,18.10; Upgrade opensuse leap to a higher version than 42.3,and avoid the version 42.3