QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libiscsiUpgrade sgabiosUpgrade libiscsi-utilsUpgrade sgabios-binUpgrade netcf-libsUpgrade libiscsi-develUpgrade netcf-develUpgrade netcf | May 4, 2022 | Mar 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade qemu-ui-gtkUpgrade qemu-ui-cursesUpgrade qemu-user-staticUpgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-audio-alsaUpgrade qemu-system-aarch64Upgrade qemu-system-aarch64-coreUpgrade qemu-block-dmgUpgrade qemu-system-x86Upgrade qemu-block-nfsUpgrade qemu-userUpgrade qemu-block-curlUpgrade ivshmem-toolsUpgrade qemu-debuginfoUpgrade qemu-user-binfmtUpgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade qemuUpgrade qemu-audio-sdlUpgrade qemu-imgUpgrade qemu-block-sshUpgrade qemu-system-x86-coreUpgrade qemu-block-rbdUpgrade qemu-commonUpgrade qemu-kvm-coreUpgrade qemu-ui-sdl | Nov 12, 2020 | Mar 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 5, 2020 |
| Centos_linux | — | Upgrade ruby-hivex-debuginfoUpgrade ruby-hivexUpgrade qemu-kvm-commonUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-core-debuginfoUpgrade supermin-develUpgrade libvirt-admin-debuginfoUpgrade nbdkit-example-pluginsUpgrade libguestfs-gfs2Upgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-xfsUpgrade libvirt-daemon-kvmUpgrade netcfUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade seavgabios-binUpgrade libvirt-daemon-config-networkUpgrade libvirt-docsUpgrade libvirt-nssUpgrade libguestfs-winsupportUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade hivex-debugsourceUpgrade virt-v2vUpgrade virt-dibUpgrade libvirt-clientUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-libs-debuginfoUpgrade libvirt-nss-debuginfoUpgrade netcf-libsUpgrade hivex-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemonUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-develUpgrade libguestfs-debuginfoUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade libvirt-develUpgrade libguestfs-toolsUpgrade libvirt-debuginfoUpgrade seabiosUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfsUpgrade ruby-libguestfs-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-gobject-develUpgrade libiscsi-develUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade hivex-develUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-adminUpgrade perl-hivex-debuginfoUpgrade qemu-kvm-tools-maUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-plugin-python3Upgrade libguestfs-javadocUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade seabios-binUpgrade libvirt-daemon-debuginfoUpgrade supermin-debuginfoUpgrade qemu-kvm-common-maUpgrade libvirt-daemon-driver-storage-glusterUpgrade lua-guestfsUpgrade qemu-img-maUpgrade python3-libvirtUpgrade perl-hivexUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkitUpgrade netcf-debugsourceUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-bash-completionUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-lock-sanlockUpgrade nbdkit-plugin-gzipUpgrade libvirtUpgrade libguestfs-man-pages-jaUpgrade libguestfs-rsyncUpgrade libiscsiUpgrade libguestfs-develUpgrade virt-dib-debuginfoUpgrade ruby-libguestfsUpgrade perl-Sys-Guestfs-debuginfoUpgrade qemu-kvm-block-sshUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-maUpgrade libguestfs-javaUpgrade python3-libguestfsUpgrade qemu-img-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-client-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade perl-Sys-VirtUpgrade python3-hivex-debuginfoUpgrade libvirt-python-debugsourceUpgrade sgabios-binUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade superminUpgrade libiscsi-debuginfoUpgrade python3-libvirt-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-lock-sanlock-debuginfoUpgrade qemu-kvm-coreUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-guest-agentUpgrade nbdkit-debugsourceUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade netcf-libs-debuginfoUpgrade nbdkit-debuginfoUpgrade libiscsi-utilsUpgrade supermin-debugsourceUpgrade nbdkit-bash-completionUpgrade hivexUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libiscsi-debugsourceUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-iscsiUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-tools-cUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade sgabiosUpgrade libiscsi-utils-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-rescueUpgrade libvirt-debugsourceUpgrade nbdkit-plugin-vddkUpgrade qemu-kvm-block-rbd | Jul 2, 2020 | Mar 5, 2020 |
| Debian | — | Upgrade qemu | Apr 29, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-img | Nov 3, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Sep 28, 2020 | Mar 5, 2020 |
| Oracle_linux | — | Upgrade libguestfs-gfs2Upgrade libvirt-develUpgrade nbdkit-bash-completionUpgrade supermin-develUpgrade qemu-kvm-commonUpgrade superminUpgrade libguestfs-javaUpgrade qemu-kvm-testsUpgrade ocaml-libguestfs-develUpgrade nbdkitUpgrade nbdkit-example-pluginsUpgrade libvirt-clientUpgrade libguestfs-develUpgrade python3-libvirtUpgrade ocaml-hivex-develUpgrade ocaml-libguestfsUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-config-networkUpgrade libguestfs-toolsUpgrade libiscsi-utilsUpgrade nbdkit-plugin-xzUpgrade libvirt-daemonUpgrade libvirt-dbusUpgrade libvirt-adminUpgrade libvirt-daemon-driver-secretUpgrade libiscsi-develUpgrade libguestfs-xfsUpgrade nbdkit-plugin-python3Upgrade seabiosUpgrade libguestfs-benchmarkingUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-man-pages-ukUpgrade python3-hivexUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-rbdUpgrade netcfUpgrade virt-v2vUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-javadocUpgrade libguestfs-java-develUpgrade libguestfs-tools-cUpgrade libguestfs-rsyncUpgrade netcf-libsUpgrade ocaml-hivexUpgrade sgabios-binUpgrade perl-Sys-VirtUpgrade qemu-kvm-block-curlUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-interfaceUpgrade seabios-binUpgrade hivex-develUpgrade virt-dibUpgrade ruby-libguestfsUpgrade nbdkit-plugin-vddkUpgrade qemu-kvm-block-rbdUpgrade python3-libguestfsUpgrade ruby-hivexUpgrade qemu-imgUpgrade nbdkit-basic-pluginsUpgrade lua-guestfsUpgrade libvirt-daemon-config-nwfilterUpgrade hivexUpgrade libguestfs-inspect-iconsUpgrade libguestfs-gobjectUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirtUpgrade sgabiosUpgrade seavgabios-binUpgrade libvirt-libsUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-diskUpgrade libiscsiUpgrade perl-Sys-GuestfsUpgrade libvirt-nssUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfsUpgrade nbdkit-plugin-gzipUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-docsUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvm-block-sshUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvm-block-glusterUpgrade perl-hivexUpgrade netcf-develUpgrade nbdkit-develUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-bash-completionUpgrade libguestfs-rescue | Jul 22, 2020 | Sep 17, 2019 |
| Redhat_linux | — | Upgrade qemu-kvm-tests-debuginfoUpgrade lua-guestfsUpgrade python3-libvirt-debuginfoUpgrade hivex-debuginfoUpgrade virt-dib-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-gfs2Upgrade virt-v2vUpgrade python3-libguestfsUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-kvm-block-sshUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-tools-rhevUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-kvm-maUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-common-rhevUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-man-pages-ukUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade netcf-libs-debuginfoUpgrade libiscsi-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-plugin-python-commonUpgrade seabiosUpgrade perl-hivex-debuginfoUpgrade qemu-img-debuginfoUpgrade libvirt-nssUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-bash-completionUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libiscsi-utilsUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade ruby-hivex-debuginfoUpgrade netcfUpgrade libguestfs-javadocUpgrade libvirt-nss-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-adminUpgrade perl-Sys-Guestfs-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-img-maUpgrade qemu-kvm-block-curl-debuginfoUpgrade supermin-debuginfoUpgrade libguestfs-bash-completionUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-develUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-kvm-toolsUpgrade superminUpgrade libvirt-daemonUpgrade libguestfs-xfsUpgrade libguestfs-toolsUpgrade qemu-kvm-block-rbdUpgrade python3-hivexUpgrade libvirt-daemon-config-networkUpgrade libvirtUpgrade sgabiosUpgrade python3-hivex-debuginfoUpgrade nbdkit-debuginfoUpgrade ocaml-hivex-debuginfoUpgrade nbdkit-develUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-img-rhevUpgrade supermin-develUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-diskUpgrade ocaml-hivex-develUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade virt-v2v-debuginfoUpgrade netcf-develUpgrade perl-hivexUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-nwfilterUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libiscsi-develUpgrade nbdkit-debugsourceUpgrade supermin-debugsourceUpgrade netcf-libsUpgrade libguestfs-debugsourceUpgrade seabios-binUpgrade libvirt-daemon-driver-storageUpgrade lua-guestfs-debuginfoUpgrade ocaml-libguestfs-debuginfoUpgrade libguestfs-gobjectUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade ocaml-libguestfs-develUpgrade libguestfs-winsupportUpgrade qemu-kvmUpgrade libvirt-admin-debuginfoUpgrade ocaml-libguestfsUpgrade libguestfs-rsyncUpgrade libvirt-dbus-debugsourceUpgrade libvirt-dbusUpgrade libvirt-debugsourceUpgrade python3-libguestfs-debuginfoUpgrade libvirt-lock-sanlockUpgrade libguestfs-javaUpgrade netcf-debuginfoUpgrade libvirt-debuginfoUpgrade ocaml-hivexUpgrade libguestfs-java-develUpgrade qemu-kvm-testsUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade hivexUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade ruby-hivexUpgrade sgabios-binUpgrade libguestfs-tools-cUpgrade libvirt-daemon-debuginfoUpgrade SLOFUpgrade libvirt-python-debugsourceUpgrade nbdkitUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade hivex-debugsourceUpgrade qemu-imgUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libiscsi-debugsourceUpgrade python3-libvirtUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-plugin-python3Upgrade libguestfs-benchmarkingUpgrade libguestfs-develUpgrade qemu-kvm-rhev-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-tools-maUpgrade qemu-kvm-rhevUpgrade libiscsiUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade netcf-debugsourceUpgrade qemu-kvm-core-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libguestfs-gobject-develUpgrade nbdkit-plugin-vddkUpgrade nbdkit-bash-completionUpgrade nbdkit-basic-pluginsUpgrade hivex-develUpgrade libvirt-docsUpgrade seavgabios-binUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libguestfs-debuginfoUpgrade libguestfsUpgrade qemu-kvm-common-maUpgrade perl-Sys-VirtUpgrade qemu-kvm-core | Jul 2, 2020 | Mar 5, 2020 |
| Rocky_linux | — | Upgrade netcfUpgrade netcf-libsUpgrade netcf-debuginfoUpgrade libiscsi-utilsUpgrade libiscsi-utils-debuginfoUpgrade sgabiosUpgrade netcf-debugsourceUpgrade libiscsi-debuginfoUpgrade libiscsiUpgrade netcf-develUpgrade libiscsi-debugsourceUpgrade libiscsi-develUpgrade netcf-libs-debuginfo | Mar 12, 2024 | Mar 5, 2020 |
| Suse | — | Upgrade qemu-linux-userUpgrade qemuUpgrade qemu-block-nfsUpgrade qemu-ppcUpgrade qemu-block-glusterUpgrade qemu-toolsUpgrade qemu-sgabiosUpgrade qemu-ui-sdlUpgrade qemu-ipxeUpgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-block-sshUpgrade qemu-ui-cursesUpgrade qemu-vgabiosUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-extraUpgrade qemu-langUpgrade qemu-audio-alsaUpgrade qemu-block-dmgUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-kvmUpgrade qemu-audio-sdlUpgrade qemu-block-curlUpgrade qemu-ksmUpgrade qemu-x86Upgrade qemu-guest-agentUpgrade qemu-seabios | Apr 2, 2020 | Mar 5, 2020 |
| Ubuntu | — | Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemuUpgrade qemu-system-aarch64 | May 22, 2020 | Mar 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub