QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sgabiosUpgrade libiscsiUpgrade sgabios-binUpgrade libiscsi-utilsUpgrade libiscsi-develUpgrade netcf-develUpgrade netcfUpgrade netcf-libs | May 4, 2022 | Mar 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade qemu-ui-cursesUpgrade qemu-debuginfoUpgrade qemu-system-aarch64-coreUpgrade qemu-block-curlUpgrade qemu-userUpgrade qemu-user-binfmtUpgrade qemu-user-staticUpgrade qemu-system-aarch64Upgrade qemu-audio-ossUpgrade qemu-ui-gtkUpgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-block-dmgUpgrade qemu-block-nfsUpgrade qemu-kvm-coreUpgrade qemu-block-sshUpgrade qemu-ui-sdlUpgrade qemu-commonUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-system-x86-coreUpgrade qemuUpgrade qemu-audio-sdlUpgrade qemu-imgUpgrade qemu-block-iscsi | Nov 12, 2020 | Mar 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 5, 2020 |
| Centos_linux | — | Upgrade ruby-libguestfs-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libguestfs-debugsourceUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-debuginfoUpgrade libiscsi-develUpgrade nbdkit-plugin-xzUpgrade hivex-debugsourceUpgrade hivex-develUpgrade libvirt-daemonUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-benchmarkingUpgrade hivex-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade supermin-develUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-adminUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-secretUpgrade perl-hivexUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-common-maUpgrade qemu-img-maUpgrade lua-guestfsUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade nbdkit-develUpgrade libvirt-daemon-debuginfoUpgrade python3-libvirtUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-plugin-python3Upgrade virt-dibUpgrade libvirt-daemon-driver-networkUpgrade netcfUpgrade ruby-hivexUpgrade seabiosUpgrade libguestfs-xfsUpgrade libguestfs-gobject-debuginfoUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-libs-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-nssUpgrade qemu-kvm-commonUpgrade libguestfs-winsupportUpgrade seabios-binUpgrade libvirt-nss-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-bash-completionUpgrade ruby-hivex-debuginfoUpgrade libvirt-admin-debuginfoUpgrade netcf-libsUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-diskUpgrade supermin-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade seavgabios-binUpgrade libvirt-daemon-driver-interfaceUpgrade virt-v2vUpgrade libvirt-daemon-driver-network-debuginfoUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-toolsUpgrade libguestfs-gfs2Upgrade libvirt-daemon-kvmUpgrade libguestfsUpgrade qemu-kvm-tools-maUpgrade libvirt-debuginfoUpgrade libguestfs-gobject-develUpgrade nbdkit-example-pluginsUpgrade libvirt-develUpgrade qemu-kvm-block-rbd-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-logicalUpgrade ruby-libguestfsUpgrade libguestfs-man-pages-jaUpgrade libguestfs-rsyncUpgrade libvirt-python-debugsourceUpgrade netcf-libs-debuginfoUpgrade python3-libvirt-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libguestfs-develUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-dbusUpgrade libguestfs-bash-completionUpgrade python3-libguestfsUpgrade perl-Sys-VirtUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-javaUpgrade libvirt-client-debuginfoUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-maUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade python3-hivexUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-coreUpgrade netcf-debuginfoUpgrade nbdkitUpgrade qemu-kvm-debuginfoUpgrade nbdkit-bash-completionUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade sgabios-binUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-debugsourceUpgrade libguestfs-java-develUpgrade superminUpgrade perl-Sys-GuestfsUpgrade libiscsi-utils-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade sgabiosUpgrade nbdkit-plugin-python-commonUpgrade nbdkit-plugin-vddkUpgrade virt-v2v-debuginfoUpgrade netcf-debugsourceUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-rescueUpgrade libguestfs-gobjectUpgrade qemu-imgUpgrade qemu-kvm-block-curlUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-toolsUpgrade python3-hivex-debuginfoUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-mpathUpgrade supermin-debugsourceUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirtUpgrade perl-Sys-Guestfs-debuginfoUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-tools-cUpgrade hivexUpgrade libiscsi-debugsourceUpgrade virt-dib-debuginfoUpgrade libiscsi-utilsUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-debugsourceUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-mpath-debuginfo | Jul 2, 2020 | Mar 5, 2020 |
| Debian | — | Upgrade qemu | Apr 29, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-img | Nov 3, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Sep 28, 2020 | Mar 5, 2020 |
| Oracle_linux | — | Upgrade lua-guestfsUpgrade qemu-imgUpgrade perl-Sys-GuestfsUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-nssUpgrade libvirt-libsUpgrade sgabiosUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfsUpgrade libvirt-docsUpgrade python3-libguestfsUpgrade ruby-hivexUpgrade qemu-kvm-block-sshUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-networkUpgrade libiscsiUpgrade seavgabios-binUpgrade hivexUpgrade nbdkit-develUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-rbdUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-coreUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade ruby-libguestfsUpgrade qemu-kvm-block-glusterUpgrade libvirt-lock-sanlockUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-plugin-python-commonUpgrade netcf-develUpgrade qemu-kvm-toolsUpgrade libvirtUpgrade libguestfs-winsupportUpgrade libguestfs-rescueUpgrade libvirt-bash-completionUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-xfsUpgrade qemu-guest-agentUpgrade ocaml-hivexUpgrade virt-dibUpgrade libiscsi-utilsUpgrade nbdkit-plugin-xzUpgrade qemu-kvmUpgrade netcf-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libguestfs-tools-cUpgrade libguestfs-javaUpgrade superminUpgrade sgabios-binUpgrade ocaml-hivex-develUpgrade libguestfs-develUpgrade nbdkit-example-pluginsUpgrade libguestfs-bash-completionUpgrade virt-v2vUpgrade seabiosUpgrade python3-libvirtUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-man-pages-ukUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-clientUpgrade supermin-develUpgrade libvirt-develUpgrade libguestfs-gfs2Upgrade nbdkit-bash-completionUpgrade qemu-kvm-commonUpgrade seabios-binUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-toolsUpgrade netcfUpgrade python3-hivexUpgrade libvirt-adminUpgrade libguestfs-benchmarkingUpgrade ocaml-libguestfs-develUpgrade perl-Sys-VirtUpgrade libvirt-dbusUpgrade libguestfs-rsyncUpgrade libguestfs-javadocUpgrade libguestfs-java-develUpgrade qemu-kvm-testsUpgrade libvirt-daemon-driver-secretUpgrade libiscsi-develUpgrade qemu-kvm-block-curlUpgrade ocaml-libguestfsUpgrade hivex-develUpgrade libvirt-daemon-driver-storage | Jul 22, 2020 | Sep 17, 2019 |
| Redhat_linux | — | Upgrade libiscsi-utilsUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-develUpgrade libguestfs-inspect-iconsUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-toolsUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-bash-completionUpgrade nbdkit-develUpgrade netcf-libs-debuginfoUpgrade python3-libguestfsUpgrade virt-v2vUpgrade libvirt-adminUpgrade virt-dib-debuginfoUpgrade qemu-kvm-block-sshUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade superminUpgrade libvirt-daemonUpgrade qemu-kvm-toolsUpgrade nbdkit-basic-plugins-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-tools-rhevUpgrade nbdkit-plugin-python3-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade seabiosUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-nss-debuginfoUpgrade supermin-debuginfoUpgrade libguestfs-man-pages-ukUpgrade lua-guestfsUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-gfs2Upgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-plugin-python-commonUpgrade qemu-guest-agentUpgrade python3-hivexUpgrade qemu-kvm-common-rhevUpgrade python3-libvirt-debuginfoUpgrade libguestfs-rescueUpgrade qemu-kvm-maUpgrade qemu-kvm-ma-debuginfoUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-clientUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade ocaml-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade perl-hivex-debuginfoUpgrade hivex-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade ruby-hivex-debuginfoUpgrade libvirtUpgrade libvirt-nssUpgrade nbdkit-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libguestfs-xfsUpgrade netcfUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade qemu-img-maUpgrade nbdkit-plugin-xzUpgrade qemu-img-debuginfoUpgrade python3-hivex-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-lock-sanlockUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-debuginfoUpgrade qemu-kvm-rhev-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-rhevUpgrade ocaml-hivexUpgrade libvirt-docsUpgrade seabios-binUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-debuginfoUpgrade virt-dibUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libguestfsUpgrade libiscsi-develUpgrade libvirt-client-debuginfoUpgrade ocaml-libguestfsUpgrade libguestfs-benchmarkingUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-libs-debuginfoUpgrade netcf-develUpgrade supermin-debugsourceUpgrade qemu-img-rhevUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade qemu-kvm-common-maUpgrade nbdkit-bash-completionUpgrade qemu-kvm-coreUpgrade SLOFUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-plugin-gzipUpgrade qemu-guest-agent-debuginfoUpgrade ruby-hivexUpgrade libguestfs-gobjectUpgrade libvirt-dbusUpgrade perl-Sys-VirtUpgrade nbdkit-basic-pluginsUpgrade libguestfs-develUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade python3-libvirtUpgrade libguestfs-tools-c-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade supermin-develUpgrade seavgabios-binUpgrade hivex-develUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-debugsourceUpgrade ocaml-hivex-develUpgrade hivexUpgrade libvirt-daemon-kvmUpgrade virt-v2v-debuginfoUpgrade qemu-kvmUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-plugin-vddkUpgrade perl-hivexUpgrade qemu-kvm-debugsourceUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-testsUpgrade libvirt-python-debugsourceUpgrade libvirt-debugsourceUpgrade lua-guestfs-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-admin-debuginfoUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storageUpgrade libiscsi-debugsourceUpgrade ocaml-libguestfs-develUpgrade qemu-kvm-tools-maUpgrade hivex-debugsourceUpgrade libguestfs-winsupportUpgrade libiscsiUpgrade qemu-imgUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-debuginfoUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-javaUpgrade libguestfs-gobject-develUpgrade libguestfs-rsyncUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkitUpgrade ocaml-libguestfs-debuginfoUpgrade netcf-debuginfoUpgrade netcf-libsUpgrade libvirt-libs | Jul 2, 2020 | Mar 5, 2020 |
| Rocky_linux | — | Upgrade netcf-libs-debuginfoUpgrade netcf-develUpgrade libiscsi-debugsourceUpgrade libiscsi-develUpgrade libiscsiUpgrade libiscsi-debuginfoUpgrade netcf-libsUpgrade netcf-debugsourceUpgrade libiscsi-utilsUpgrade netcf-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade netcfUpgrade sgabios | Mar 12, 2024 | Mar 5, 2020 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemuUpgrade qemu-armUpgrade qemu-block-nfsUpgrade qemu-linux-userUpgrade qemu-audio-ossUpgrade qemu-ui-sdlUpgrade qemu-block-sshUpgrade qemu-ui-cursesUpgrade qemu-block-glusterUpgrade qemu-toolsUpgrade qemu-ipxeUpgrade qemu-langUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-block-dmgUpgrade qemu-extraUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-s390Upgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade qemu-vgabiosUpgrade qemu-audio-sdlUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-block-rbdUpgrade qemu-x86Upgrade qemu-ksm | Apr 2, 2020 | Mar 5, 2020 |
| Ubuntu | — | Upgrade qemuUpgrade qemu-system-ppcUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-s390x | May 22, 2020 | Mar 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub