阿里云漏洞库

QEMU（Quick Emulator）是法国法布里斯-贝拉（Fabrice Bellard）软件开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。

QEMU 4.2.0版本中的libslirp 4.1.0版本的tcp_subr.c文件的‘tcp_emu’函数存在安全漏洞，该漏洞源于程序没有正确管理内存。攻击者可利用该漏洞造成拒绝服务或可能执行任意代码。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://gitlab.freedesktop.org/slirp/libslirp/commit/2655fffed7a9e765bcb4701dd876e9dab975f289

参考链接
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html
http://www.openwall.com/lists/oss-security/2020/01/16/2
https://access.redhat.com/errata/RHSA-2020:0348
https://access.redhat.com/errata/RHSA-2020:0775
https://gitlab.freedesktop.org/slirp/libslirp/commit/2655fffed7a9e765bcb4701d...
https://gitlab.freedesktop.org/slirp/libslirp/commit/82ebe9c370a0e2970fb5695a...
https://gitlab.freedesktop.org/slirp/libslirp/commit/ce131029d6d4a405cb7d3ac6...
https://lists.debian.org/debian-lts-announce/2020/01/msg00022.html
https://lists.debian.org/debian-lts-announce/2020/01/msg00036.html
https://lists.debian.org/debian-lts-announce/2021/02/msg00012.html
https://seclists.org/bugtraq/2020/Feb/0
https://security.gentoo.org/glsa/202005-02
https://usn.ubuntu.com/4283-1/
https://www.debian.org/security/2020/dsa-4616

CWE-ID	漏洞类型
CWE-787	跨界内存写