QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libiscsi-develUpgrade netcf-libsUpgrade netcf-develUpgrade netcfUpgrade sgabiosUpgrade libiscsi-utilsUpgrade libiscsiUpgrade sgabios-bin | May 4, 2022 | Mar 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade qemu-block-curlUpgrade qemu-block-dmgUpgrade qemu-user-staticUpgrade qemu-ui-cursesUpgrade qemu-kvmUpgrade qemu-debuginfoUpgrade qemu-system-x86Upgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade ivshmem-toolsUpgrade qemu-ui-gtkUpgrade qemu-userUpgrade qemu-audio-alsaUpgrade qemu-system-aarch64Upgrade qemu-system-aarch64-coreUpgrade qemu-user-binfmtUpgrade qemu-block-nfsUpgrade qemuUpgrade qemu-block-iscsiUpgrade qemu-ui-sdlUpgrade qemu-block-sshUpgrade qemu-commonUpgrade qemu-imgUpgrade qemu-audio-sdlUpgrade qemu-system-x86-coreUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-kvm-core | Nov 12, 2020 | Mar 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 5, 2020 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-guest-agentUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade netcf-debuginfoUpgrade python3-hivexUpgrade qemu-kvm-debugsourceUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade python3-hivex-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvm-coreUpgrade python3-libvirt-debuginfoUpgrade libiscsi-utilsUpgrade nbdkit-debugsourceUpgrade superminUpgrade sgabios-binUpgrade nbdkit-debuginfoUpgrade perl-Sys-GuestfsUpgrade perl-Sys-VirtUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade python3-libguestfsUpgrade qemu-kvm-maUpgrade libvirt-client-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-bash-completionUpgrade libguestfs-gobjectUpgrade hivexUpgrade qemu-kvm-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-javaUpgrade lua-guestfs-debuginfoUpgrade qemu-kvm-block-curlUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-dbusUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-man-pages-jaUpgrade nbdkit-plugin-gzipUpgrade libguestfs-develUpgrade nbdkit-basic-pluginsUpgrade virt-v2v-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade netcf-debugsourceUpgrade libiscsiUpgrade ruby-libguestfsUpgrade libguestfs-rsyncUpgrade qemu-kvm-block-sshUpgrade nbdkitUpgrade qemu-kvm-block-rbdUpgrade libvirtUpgrade libvirt-lock-sanlockUpgrade virt-dib-debuginfoUpgrade sgabiosUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-debugsourceUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-imgUpgrade supermin-debugsourceUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-rescueUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libiscsi-debugsourceUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-block-iscsiUpgrade libvirt-python-debugsourceUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-bash-completionUpgrade libvirt-libsUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libiscsi-develUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade seabiosUpgrade libvirt-daemon-driver-nwfilterUpgrade virt-v2vUpgrade supermin-develUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-clientUpgrade libvirt-admin-debuginfoUpgrade supermin-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemonUpgrade libguestfs-debuginfoUpgrade libvirt-libs-debuginfoUpgrade netcf-libsUpgrade libguestfs-inspect-iconsUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-networkUpgrade libvirt-develUpgrade hivex-develUpgrade libvirt-bash-completionUpgrade netcf-develUpgrade libguestfs-debugsourceUpgrade virt-dibUpgrade libguestfs-tools-c-debuginfoUpgrade qemu-kvmUpgrade qemu-img-maUpgrade perl-hivexUpgrade nbdkit-develUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-block-glusterUpgrade lua-guestfsUpgrade libguestfs-javadocUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-common-maUpgrade libguestfs-toolsUpgrade perl-Sys-Virt-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-kvmUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade nbdkit-plugin-xzUpgrade libguestfsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-python3Upgrade libguestfs-gfs2Upgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-interfaceUpgrade hivex-debugsourceUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-kvm-commonUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-benchmarkingUpgrade hivex-debuginfoUpgrade ruby-hivexUpgrade seavgabios-binUpgrade ruby-hivex-debuginfoUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade seabios-binUpgrade libvirt-adminUpgrade python3-libvirtUpgrade libguestfs-xfsUpgrade nbdkit-plugin-python3-debuginfoUpgrade netcfUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-nssUpgrade qemu-kvm-tools-ma | Jul 2, 2020 | Mar 5, 2020 |
| Debian | — | Upgrade qemu | Apr 29, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-img | Nov 3, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Sep 28, 2020 | Mar 5, 2020 |
| Oracle_linux | — | Upgrade qemu-kvmUpgrade libvirt-daemon-driver-secretUpgrade libiscsi-develUpgrade supermin-develUpgrade libvirt-adminUpgrade perl-Sys-VirtUpgrade qemu-kvm-commonUpgrade nbdkit-bash-completionUpgrade libguestfs-benchmarkingUpgrade ocaml-libguestfs-develUpgrade libguestfs-rsyncUpgrade libguestfs-bash-completionUpgrade libguestfs-javadocUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-dbusUpgrade libguestfs-java-develUpgrade netcfUpgrade libguestfs-develUpgrade nbdkitUpgrade nbdkit-example-pluginsUpgrade sgabios-binUpgrade qemu-kvm-testsUpgrade libvirt-clientUpgrade ocaml-hivex-develUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemonUpgrade netcf-libsUpgrade libguestfs-tools-cUpgrade ocaml-hivexUpgrade libguestfs-gfs2Upgrade libvirt-develUpgrade ocaml-libguestfsUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-plugin-xzUpgrade hivex-develUpgrade libguestfs-toolsUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storageUpgrade python3-libvirtUpgrade qemu-kvm-block-iscsiUpgrade virt-v2vUpgrade seabios-binUpgrade nbdkit-plugin-python3Upgrade seabiosUpgrade virt-dibUpgrade superminUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-xfsUpgrade libguestfs-javaUpgrade libvirt-daemon-kvmUpgrade netcf-develUpgrade nbdkit-basic-pluginsUpgrade libguestfs-gobject-develUpgrade nbdkit-develUpgrade qemu-kvm-block-sshUpgrade ruby-hivexUpgrade libvirt-daemon-config-nwfilterUpgrade hivexUpgrade qemu-imgUpgrade lua-guestfsUpgrade seavgabios-binUpgrade libvirt-libsUpgrade libguestfs-gobjectUpgrade libvirtUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-block-rbdUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-iscsiUpgrade ruby-libguestfsUpgrade perl-hivexUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-bash-completionUpgrade libguestfs-rescueUpgrade qemu-kvm-toolsUpgrade qemu-kvm-block-glusterUpgrade libvirt-lock-sanlockUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfsUpgrade nbdkit-plugin-python-commonUpgrade sgabiosUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-nodedevUpgrade libiscsiUpgrade libguestfs-winsupportUpgrade libguestfs-inspect-iconsUpgrade perl-Sys-GuestfsUpgrade python3-libguestfsUpgrade nbdkit-plugin-vddkUpgrade libvirt-docsUpgrade libvirt-daemon-driver-network | Jul 22, 2020 | Sep 17, 2019 |
| Redhat_linux | — | Upgrade libguestfs-toolsUpgrade qemu-kvm-common-rhevUpgrade libguestfs-rescueUpgrade libguestfs-xfsUpgrade qemu-kvm-maUpgrade libvirt-nssUpgrade libvirtUpgrade nbdkit-plugin-xz-debuginfoUpgrade hivex-debuginfoUpgrade sgabiosUpgrade libguestfs-gfs2Upgrade qemu-kvm-block-sshUpgrade perl-Sys-Guestfs-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade lua-guestfsUpgrade python3-libguestfsUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-clientUpgrade seabiosUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-storage-mpathUpgrade netcf-libs-debuginfoUpgrade superminUpgrade libguestfs-bash-completionUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade python3-hivexUpgrade qemu-kvm-ma-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade nbdkit-develUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-adminUpgrade libvirt-bash-completionUpgrade virt-v2vUpgrade qemu-img-debuginfoUpgrade perl-Sys-GuestfsUpgrade qemu-img-maUpgrade libguestfs-javadocUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-glusterUpgrade nbdkit-plugin-xzUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade ocaml-hivex-debuginfoUpgrade netcfUpgrade nbdkit-plugin-python3-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-guest-agentUpgrade libiscsi-utilsUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-tools-rhevUpgrade libvirt-develUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-toolsUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemonUpgrade libguestfs-inspect-iconsUpgrade python3-libvirt-debuginfoUpgrade supermin-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade ocaml-libguestfs-debuginfoUpgrade libguestfs-debuginfoUpgrade libguestfs-java-debuginfoUpgrade supermin-develUpgrade libguestfs-javaUpgrade qemu-kvm-rhev-debuginfoUpgrade hivexUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-diskUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-java-develUpgrade libguestfs-man-pages-jaUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfsUpgrade qemu-kvm-debugsourceUpgrade sgabios-binUpgrade libguestfs-develUpgrade ruby-libguestfsUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-client-debuginfoUpgrade ruby-hivexUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-debuginfoUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-logicalUpgrade virt-v2v-debuginfoUpgrade libvirt-admin-debuginfoUpgrade nbdkit-example-pluginsUpgrade qemu-img-rhevUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade ocaml-libguestfs-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-rsyncUpgrade libguestfs-winsupportUpgrade libvirt-daemon-kvmUpgrade libiscsiUpgrade nbdkit-debugsourceUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-secretUpgrade ocaml-libguestfsUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-tools-maUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade ocaml-hivexUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-testsUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-rhevUpgrade virt-dibUpgrade netcf-develUpgrade libguestfs-benchmarkingUpgrade hivex-debugsourceUpgrade SLOFUpgrade qemu-imgUpgrade perl-Sys-VirtUpgrade nbdkitUpgrade nbdkit-bash-completionUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-common-maUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-basic-pluginsUpgrade libguestfs-gobject-develUpgrade lua-guestfs-debuginfoUpgrade seavgabios-binUpgrade qemu-kvm-core-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libguestfs-tools-cUpgrade libguestfs-gobjectUpgrade python3-libvirtUpgrade nbdkit-plugin-vddk-debuginfoUpgrade perl-hivexUpgrade hivex-develUpgrade libvirt-python-debugsourceUpgrade libiscsi-develUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvmUpgrade libvirt-libs-debuginfoUpgrade qemu-kvm-coreUpgrade ocaml-hivex-develUpgrade libiscsi-debugsourceUpgrade seabios-bin | Jul 2, 2020 | Mar 5, 2020 |
| Rocky_linux | — | Upgrade libiscsi-develUpgrade libiscsiUpgrade netcf-develUpgrade libiscsi-debuginfoUpgrade netcf-libs-debuginfoUpgrade libiscsi-debugsourceUpgrade netcf-debugsourceUpgrade libiscsi-utilsUpgrade libiscsi-utils-debuginfoUpgrade netcfUpgrade netcf-debuginfoUpgrade netcf-libsUpgrade sgabios | Mar 12, 2024 | Mar 5, 2020 |
| Suse | — | Upgrade qemu-ipxeUpgrade qemu-ui-sdlUpgrade qemu-block-sshUpgrade qemu-toolsUpgrade qemuUpgrade qemu-block-nfsUpgrade qemu-sgabiosUpgrade qemu-block-glusterUpgrade qemu-ui-cursesUpgrade qemu-armUpgrade qemu-ppcUpgrade qemu-audio-ossUpgrade qemu-linux-userUpgrade qemu-guest-agentUpgrade qemu-s390Upgrade qemu-vgabiosUpgrade qemu-audio-sdlUpgrade qemu-kvmUpgrade qemu-seabiosUpgrade qemu-audio-paUpgrade qemu-audio-alsaUpgrade qemu-block-dmgUpgrade qemu-extraUpgrade qemu-langUpgrade qemu-ksmUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-x86Upgrade qemu-block-iscsiUpgrade qemu-ui-gtk | Apr 2, 2020 | Mar 5, 2020 |
| Ubuntu | — | Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-aarch64Upgrade qemuUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-x86 (Ubuntu Pro) | May 22, 2020 | Mar 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub