QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sgabiosUpgrade sgabios-binUpgrade libiscsiUpgrade libiscsi-utilsUpgrade netcfUpgrade netcf-develUpgrade netcf-libsUpgrade libiscsi-devel | May 4, 2022 | Mar 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade qemu-block-dmgUpgrade qemu-audio-alsaUpgrade qemu-user-binfmtUpgrade ivshmem-toolsUpgrade qemu-userUpgrade qemu-block-nfsUpgrade qemu-system-aarch64-coreUpgrade qemu-block-curlUpgrade qemu-audio-ossUpgrade qemu-system-aarch64Upgrade qemu-ui-cursesUpgrade qemu-audio-paUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-debuginfoUpgrade qemu-ui-gtkUpgrade qemu-user-staticUpgrade qemu-audio-sdlUpgrade qemu-commonUpgrade qemu-ui-sdlUpgrade qemu-kvm-coreUpgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-system-x86-coreUpgrade qemuUpgrade qemu-img | Nov 12, 2020 | Mar 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 5, 2020 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-qemuUpgrade libvirt-docsUpgrade libguestfs-gfs2Upgrade hivex-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-daemon-config-networkUpgrade libguestfs-gobject-debuginfoUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storageUpgrade seavgabios-binUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-winsupportUpgrade ruby-hivexUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-rbd-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade netcfUpgrade libguestfs-gobject-develUpgrade libvirt-debuginfoUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-common-debuginfoUpgrade virt-v2vUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade perl-hivexUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-kvm-block-glusterUpgrade ruby-libguestfs-debuginfoUpgrade qemu-img-maUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-debuginfoUpgrade lua-guestfsUpgrade supermin-develUpgrade qemu-kvmUpgrade seabios-binUpgrade python3-libvirtUpgrade qemu-kvm-common-maUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-develUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-tools-maUpgrade libvirt-daemon-driver-storage-rbdUpgrade virt-dibUpgrade libguestfs-javadocUpgrade hivex-develUpgrade perl-hivex-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-networkUpgrade netcf-libsUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-develUpgrade libvirt-daemon-kvmUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-nss-debuginfoUpgrade qemu-kvm-commonUpgrade hivex-debugsourceUpgrade seabiosUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfsUpgrade libvirt-libs-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-adminUpgrade supermin-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-clientUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-network-debuginfoUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-benchmarking-debuginfoUpgrade libiscsi-utilsUpgrade supermin-debugsourceUpgrade libiscsi-debugsourceUpgrade qemu-kvm-block-curlUpgrade libvirt-python-debugsourceUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-toolsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-block-ssh-debuginfoUpgrade perl-Sys-VirtUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-javaUpgrade libvirt-client-debuginfoUpgrade python3-libguestfsUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-develUpgrade libiscsiUpgrade libvirtUpgrade ruby-libguestfsUpgrade libguestfs-rsyncUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-plugin-gzipUpgrade libvirt-dbusUpgrade libvirt-lock-sanlockUpgrade libguestfs-man-pages-jaUpgrade nbdkit-basic-pluginsUpgrade virt-dib-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-block-sshUpgrade nbdkitUpgrade lua-guestfs-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-tools-cUpgrade python3-libvirt-debuginfoUpgrade qemu-imgUpgrade hivexUpgrade nbdkit-basic-plugins-debuginfoUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade netcf-libs-debuginfoUpgrade libguestfs-gobjectUpgrade sgabios-binUpgrade qemu-kvm-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvm-coreUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade sgabiosUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-rescueUpgrade nbdkit-plugin-python-commonUpgrade superminUpgrade libvirt-debugsourceUpgrade netcf-debugsourceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-vddkUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-java-develUpgrade nbdkit-bash-completionUpgrade nbdkit-debugsourceUpgrade qemu-kvm-block-rbdUpgrade virt-v2v-debuginfoUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-lock-sanlock-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-maUpgrade libguestfs-java-debuginfoUpgrade qemu-img-debuginfo | Jul 2, 2020 | Mar 5, 2020 |
| Debian | — | Upgrade qemu | Apr 29, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-img | Nov 3, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Sep 28, 2020 | Mar 5, 2020 |
| Oracle_linux | — | Upgrade nbdkit-bash-completionUpgrade ocaml-hivexUpgrade ocaml-hivex-develUpgrade libguestfs-gfs2Upgrade netcfUpgrade libguestfs-java-develUpgrade supermin-develUpgrade qemu-kvm-commonUpgrade netcf-libsUpgrade libguestfs-javaUpgrade libguestfs-tools-cUpgrade libvirt-develUpgrade nbdkitUpgrade libvirt-daemonUpgrade superminUpgrade libguestfs-bash-completionUpgrade sgabios-binUpgrade seabios-binUpgrade python3-hivexUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-xzUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-rbdUpgrade hivex-develUpgrade libguestfs-toolsUpgrade virt-dibUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storageUpgrade ocaml-libguestfsUpgrade libguestfs-javadocUpgrade libguestfs-develUpgrade libvirt-dbusUpgrade qemu-guest-agentUpgrade nbdkit-example-pluginsUpgrade perl-Sys-VirtUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-xfsUpgrade ocaml-libguestfs-develUpgrade libiscsi-develUpgrade libvirt-adminUpgrade python3-libvirtUpgrade qemu-kvmUpgrade virt-v2vUpgrade seabiosUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-testsUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-rbdUpgrade ruby-libguestfsUpgrade nbdkit-plugin-python-commonUpgrade libvirt-bash-completionUpgrade nbdkit-develUpgrade libguestfsUpgrade qemu-kvm-coreUpgrade libvirt-libsUpgrade nbdkit-plugin-gzipUpgrade libguestfs-gobjectUpgrade perl-Sys-GuestfsUpgrade lua-guestfsUpgrade qemu-imgUpgrade hivexUpgrade ruby-hivexUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-toolsUpgrade nbdkit-plugin-vddkUpgrade python3-libguestfsUpgrade libvirt-docsUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-coreUpgrade perl-hivexUpgrade netcf-develUpgrade libguestfs-rescueUpgrade qemu-kvm-block-glusterUpgrade libvirtUpgrade libguestfs-gobject-develUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-nodedevUpgrade libiscsiUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-inspect-iconsUpgrade sgabiosUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-iscsi | Jul 22, 2020 | Sep 17, 2019 |
| Redhat_linux | — | Upgrade libvirt-lock-sanlockUpgrade netcf-debuginfoUpgrade qemu-kvm-rhevUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-example-pluginsUpgrade ocaml-hivex-develUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade seabios-binUpgrade libvirt-dbus-debugsourceUpgrade qemu-kvmUpgrade libvirt-libsUpgrade qemu-kvm-rhev-debuginfoUpgrade libguestfsUpgrade qemu-imgUpgrade libguestfs-tools-cUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade python3-libvirtUpgrade qemu-kvm-testsUpgrade libguestfs-winsupportUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-qemuUpgrade netcf-debugsourceUpgrade ocaml-libguestfsUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-libs-debuginfoUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-debugsourceUpgrade netcf-libsUpgrade supermin-develUpgrade qemu-kvm-tools-maUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libguestfs-benchmarkingUpgrade libguestfs-rsyncUpgrade ocaml-libguestfs-develUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade ocaml-libguestfs-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-dbusUpgrade libguestfs-develUpgrade libiscsi-debugsourceUpgrade qemu-kvm-common-maUpgrade nbdkit-plugin-vddkUpgrade libguestfs-java-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storageUpgrade libvirt-debuginfoUpgrade ocaml-hivexUpgrade qemu-guest-agent-debuginfoUpgrade perl-Sys-VirtUpgrade libguestfs-javaUpgrade SLOFUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-kvmUpgrade libiscsiUpgrade nbdkitUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-java-develUpgrade qemu-kvm-block-rbd-debuginfoUpgrade hivex-debugsourceUpgrade ruby-hivexUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-coreUpgrade nbdkit-bash-completionUpgrade libvirt-python-debugsourceUpgrade hivexUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-docsUpgrade libguestfs-gobject-develUpgrade hivex-develUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade supermin-debugsourceUpgrade ruby-libguestfsUpgrade libguestfs-man-pages-jaUpgrade netcf-develUpgrade perl-hivexUpgrade sgabios-binUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-debugsourceUpgrade qemu-img-rhevUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-plugin-python3Upgrade virt-dibUpgrade lua-guestfs-debuginfoUpgrade libguestfs-javadocUpgrade qemu-kvm-toolsUpgrade sgabiosUpgrade libvirt-daemon-driver-networkUpgrade libvirt-nss-debuginfoUpgrade netcfUpgrade libguestfs-inspect-iconsUpgrade hivex-debuginfoUpgrade python3-hivexUpgrade nbdkit-debuginfoUpgrade nbdkit-plugin-xzUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-nssUpgrade qemu-kvm-ma-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-common-rhevUpgrade lua-guestfsUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade supermin-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-nodedevUpgrade netcf-libs-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libguestfs-bash-completionUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-glusterUpgrade python3-libvirt-debuginfoUpgrade qemu-img-maUpgrade libguestfs-gfs2Upgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade superminUpgrade libvirt-daemonUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade python3-libguestfsUpgrade perl-hivex-debuginfoUpgrade virt-dib-debuginfoUpgrade virt-v2vUpgrade qemu-kvm-block-curlUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-rescueUpgrade libvirt-adminUpgrade libguestfs-toolsUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade nbdkit-develUpgrade perl-Sys-Guestfs-debuginfoUpgrade ocaml-hivex-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-tools-rhevUpgrade libiscsi-utilsUpgrade libguestfs-benchmarking-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-develUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-xfsUpgrade libvirt-daemon-config-networkUpgrade perl-Sys-GuestfsUpgrade libiscsi-debuginfoUpgrade qemu-kvm-maUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-img-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-gobject-debuginfoUpgrade seabiosUpgrade libvirt-daemon-driver-storage-scsi | Jul 2, 2020 | Mar 5, 2020 |
| Rocky_linux | — | Upgrade netcfUpgrade netcf-libsUpgrade libiscsi-utils-debuginfoUpgrade libiscsi-utilsUpgrade netcf-debugsourceUpgrade sgabiosUpgrade netcf-debuginfoUpgrade netcf-develUpgrade libiscsi-develUpgrade netcf-libs-debuginfoUpgrade libiscsi-debugsourceUpgrade libiscsiUpgrade libiscsi-debuginfo | Mar 12, 2024 | Mar 5, 2020 |
| Suse | — | Upgrade qemu-audio-sdlUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-block-dmgUpgrade qemu-guest-agentUpgrade qemu-s390Upgrade qemu-audio-alsaUpgrade qemu-block-curlUpgrade qemu-ksmUpgrade qemu-block-rbdUpgrade qemu-seabiosUpgrade qemu-extraUpgrade qemu-langUpgrade qemu-ppcUpgrade qemuUpgrade qemu-toolsUpgrade qemu-armUpgrade qemu-ui-cursesUpgrade qemu-linux-userUpgrade qemu-ipxeUpgrade qemu-block-sshUpgrade qemu-ui-sdlUpgrade qemu-block-glusterUpgrade qemu-block-nfsUpgrade qemu-sgabiosUpgrade qemu-audio-oss | Apr 2, 2020 | Mar 5, 2020 |
| Ubuntu | — | Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-aarch64Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemuUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro) | May 22, 2020 | Mar 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub