QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libiscsi-utilsUpgrade libiscsiUpgrade sgabios-binUpgrade sgabiosUpgrade netcf-libsUpgrade libiscsi-develUpgrade netcfUpgrade netcf-devel | May 4, 2022 | Mar 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade qemu-audio-sdlUpgrade qemu-kvm-coreUpgrade qemuUpgrade qemu-imgUpgrade qemu-ui-sdlUpgrade qemu-commonUpgrade qemu-block-sshUpgrade qemu-system-x86-coreUpgrade qemu-user-binfmtUpgrade qemu-block-dmgUpgrade qemu-block-nfsUpgrade qemu-kvmUpgrade ivshmem-toolsUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-system-x86Upgrade qemu-block-curlUpgrade qemu-audio-ossUpgrade qemu-system-aarch64Upgrade qemu-user-staticUpgrade qemu-userUpgrade qemu-ui-cursesUpgrade qemu-system-aarch64-coreUpgrade qemu-debuginfoUpgrade qemu-ui-gtk | Nov 12, 2020 | Mar 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 5, 2020 |
| Centos_linux | — | Upgrade python3-hivex-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-gobjectUpgrade qemu-imgUpgrade nbdkit-basic-plugins-debuginfoUpgrade netcf-libs-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libiscsi-utilsUpgrade hivexUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-coreUpgrade libvirt-lock-sanlock-debuginfoUpgrade netcf-debuginfoUpgrade python3-hivexUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-guest-agentUpgrade libiscsi-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-python-debugsourceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-dbusUpgrade libguestfs-java-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-maUpgrade perl-Sys-Guestfs-debuginfoUpgrade ruby-libguestfsUpgrade libguestfs-rsyncUpgrade libvirt-lock-sanlockUpgrade nbdkit-example-plugins-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-client-debuginfoUpgrade libguestfs-javaUpgrade libiscsiUpgrade nbdkitUpgrade nbdkit-basic-pluginsUpgrade perl-Sys-VirtUpgrade qemu-kvm-block-sshUpgrade python3-libguestfsUpgrade virt-dib-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-img-debuginfoUpgrade libguestfs-man-pages-jaUpgrade superminUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-debuginfoUpgrade sgabios-binUpgrade nbdkit-debugsourceUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-debugsourceUpgrade nbdkit-bash-completionUpgrade sgabiosUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-java-develUpgrade libvirt-dbus-debuginfoUpgrade libvirt-debugsourceUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-nodedevUpgrade virt-v2v-debuginfoUpgrade netcf-debugsourceUpgrade nbdkit-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-toolsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade supermin-debugsourceUpgrade libvirt-libsUpgrade nbdkit-plugin-gzipUpgrade libguestfs-rescueUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-xfsUpgrade libvirt-daemon-config-networkUpgrade libvirt-adminUpgrade hivex-debuginfoUpgrade ruby-hivexUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade seavgabios-binUpgrade libguestfs-winsupportUpgrade libguestfs-tools-c-debuginfoUpgrade perl-hivexUpgrade nbdkit-plugin-python3Upgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-rbdUpgrade libiscsi-develUpgrade libguestfs-inspect-iconsUpgrade libvirt-clientUpgrade netcf-develUpgrade virt-dibUpgrade netcf-libsUpgrade libvirt-libs-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade qemu-kvm-tools-maUpgrade seabiosUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade netcfUpgrade libvirt-nssUpgrade libvirt-daemon-driver-secretUpgrade seabios-binUpgrade qemu-img-maUpgrade qemu-kvm-common-maUpgrade libvirt-daemon-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-admin-debuginfoUpgrade nbdkit-develUpgrade libguestfs-javadocUpgrade supermin-develUpgrade libguestfs-man-pages-ukUpgrade libguestfs-debugsourceUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade hivex-debugsourceUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-block-curl-debuginfoUpgrade python3-libvirtUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-bash-completionUpgrade qemu-kvmUpgrade lua-guestfsUpgrade libvirt-debuginfoUpgrade virt-v2vUpgrade libvirt-docsUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfs-gfs2Upgrade libguestfs-gobject-develUpgrade libvirt-develUpgrade libguestfs-toolsUpgrade perl-hivex-debuginfoUpgrade supermin-debuginfoUpgrade libvirt-daemon-kvmUpgrade libguestfsUpgrade qemu-kvm-ma-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade hivex-develUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-debuginfoUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-commonUpgrade libvirt-nss-debuginfoUpgrade ruby-hivex-debuginfo | Jul 2, 2020 | Mar 5, 2020 |
| Debian | — | Upgrade qemu | Apr 29, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-img | Nov 3, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Sep 28, 2020 | Mar 5, 2020 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-clientUpgrade nbdkit-bash-completionUpgrade libguestfs-tools-cUpgrade libguestfs-develUpgrade ocaml-hivex-develUpgrade ocaml-hivexUpgrade libguestfs-rsyncUpgrade libguestfs-xfsUpgrade libguestfs-man-pages-ukUpgrade superminUpgrade python3-hivexUpgrade libguestfs-bash-completionUpgrade nbdkitUpgrade netcfUpgrade libguestfs-gfs2Upgrade libvirt-develUpgrade qemu-guest-agentUpgrade ocaml-libguestfsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libiscsi-utilsUpgrade libguestfs-toolsUpgrade hivex-develUpgrade virt-dibUpgrade seabios-binUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-curlUpgrade nbdkit-plugin-xzUpgrade libvirt-daemonUpgrade sgabios-binUpgrade netcf-libsUpgrade libvirt-daemon-config-networkUpgrade libguestfs-javaUpgrade nbdkit-example-pluginsUpgrade supermin-develUpgrade qemu-kvm-commonUpgrade qemu-kvm-testsUpgrade ocaml-libguestfs-develUpgrade libguestfs-java-develUpgrade libguestfs-javadocUpgrade libvirt-dbusUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-secretUpgrade libiscsi-develUpgrade libguestfs-benchmarkingUpgrade libvirt-adminUpgrade virt-v2vUpgrade seabiosUpgrade qemu-kvmUpgrade python3-libvirtUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-winsupportUpgrade libvirt-libsUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-nssUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-inspect-iconsUpgrade python3-libguestfsUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-sshUpgrade libvirtUpgrade libvirt-docsUpgrade hivexUpgrade libvirt-daemon-driver-nodedevUpgrade seavgabios-binUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-networkUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-coreUpgrade libvirt-lock-sanlockUpgrade libguestfs-man-pages-jaUpgrade netcf-develUpgrade perl-hivexUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-block-glusterUpgrade libguestfs-rescueUpgrade libvirt-bash-completionUpgrade nbdkit-develUpgrade libvirt-daemon-driver-qemuUpgrade lua-guestfsUpgrade qemu-kvm-block-rbdUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade libvirt-daemon-config-nwfilterUpgrade ruby-libguestfsUpgrade libguestfsUpgrade nbdkit-basic-pluginsUpgrade ruby-hivex | Jul 22, 2020 | Sep 17, 2019 |
| Redhat_linux | — | Upgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-tools-maUpgrade libiscsiUpgrade nbdkit-plugin-vddkUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade lua-guestfs-debuginfoUpgrade qemu-kvm-testsUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-common-maUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-libs-debuginfoUpgrade seabios-binUpgrade libvirt-debuginfoUpgrade nbdkit-basic-pluginsUpgrade hivex-develUpgrade qemu-kvm-rhevUpgrade libguestfs-javaUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-client-debuginfoUpgrade qemu-kvm-rhev-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-config-nwfilterUpgrade virt-dibUpgrade qemu-kvm-block-iscsiUpgrade sgabios-binUpgrade netcf-libsUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-gobjectUpgrade qemu-kvm-debugsourceUpgrade SLOFUpgrade netcf-debugsourceUpgrade ocaml-hivexUpgrade hivexUpgrade libiscsi-develUpgrade libvirt-admin-debuginfoUpgrade virt-v2v-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-kvmUpgrade ocaml-libguestfsUpgrade libvirt-python-debugsourceUpgrade qemu-kvm-coreUpgrade python3-libvirtUpgrade libvirt-daemon-driver-qemuUpgrade ocaml-libguestfs-debuginfoUpgrade hivex-debugsourceUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-imgUpgrade libvirt-libsUpgrade libguestfs-debugsourceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade ocaml-libguestfs-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade netcf-debuginfoUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade netcf-develUpgrade python3-libguestfs-debuginfoUpgrade libvirt-docsUpgrade libguestfs-tools-cUpgrade libguestfsUpgrade libguestfs-winsupportUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-diskUpgrade supermin-develUpgrade libvirt-daemon-driver-secretUpgrade ruby-libguestfsUpgrade qemu-img-rhevUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade ocaml-hivex-develUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade perl-Sys-VirtUpgrade nbdkit-plugin-gzipUpgrade libguestfs-benchmarkingUpgrade libguestfs-debuginfoUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-rsyncUpgrade nbdkitUpgrade libvirt-debugsourceUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-python3Upgrade libguestfs-gobject-develUpgrade libiscsi-debugsourceUpgrade seavgabios-binUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-commonUpgrade libvirt-nssUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade libguestfs-rescueUpgrade python3-libvirt-debuginfoUpgrade qemu-kvm-maUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-develUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libguestfs-toolsUpgrade qemu-kvm-common-rhevUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade qemu-guest-agentUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade virt-dib-debuginfoUpgrade lua-guestfsUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade seabiosUpgrade qemu-kvm-toolsUpgrade ruby-hivex-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs-bash-completionUpgrade virt-v2vUpgrade python3-hivex-debuginfoUpgrade qemu-img-maUpgrade libvirt-nss-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-config-networkUpgrade ocaml-hivex-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-clientUpgrade netcfUpgrade libguestfs-javadocUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-glusterUpgrade hivex-debuginfoUpgrade libguestfs-xfsUpgrade qemu-kvm-tools-rhevUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-plugin-python-commonUpgrade supermin-debuginfoUpgrade perl-hivex-debuginfoUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-dbus-debuginfoUpgrade nbdkit-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade netcf-libs-debuginfoUpgrade libiscsi-utilsUpgrade python3-libguestfsUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-man-pages-ukUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-develUpgrade qemu-kvm-block-sshUpgrade superminUpgrade libguestfs-gfs2Upgrade libiscsi-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-img-debuginfoUpgrade sgabiosUpgrade python3-hivex | Jul 2, 2020 | Mar 5, 2020 |
| Rocky_linux | — | Upgrade netcf-debuginfoUpgrade sgabiosUpgrade netcf-debugsourceUpgrade netcfUpgrade libiscsi-utilsUpgrade libiscsi-utils-debuginfoUpgrade netcf-libsUpgrade libiscsi-debugsourceUpgrade libiscsi-develUpgrade libiscsiUpgrade netcf-libs-debuginfoUpgrade libiscsi-debuginfoUpgrade netcf-devel | Mar 12, 2024 | Mar 5, 2020 |
| Suse | — | Upgrade qemu-ksmUpgrade qemu-extraUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade qemu-audio-sdlUpgrade qemu-ui-gtkUpgrade qemu-langUpgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade qemu-audio-paUpgrade qemu-seabiosUpgrade qemu-block-dmgUpgrade qemu-x86Upgrade qemu-block-curlUpgrade qemu-ui-sdlUpgrade qemuUpgrade qemu-linux-userUpgrade qemu-block-nfsUpgrade qemu-armUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-ipxeUpgrade qemu-block-sshUpgrade qemu-audio-ossUpgrade qemu-block-glusterUpgrade qemu-ui-cursesUpgrade qemu-ppc | Apr 2, 2020 | Mar 5, 2020 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-aarch64Upgrade qemuUpgrade qemu-system-sparcUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-aarch64 (Ubuntu Pro) | May 22, 2020 | Mar 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub