QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade netcfUpgrade libiscsi-develUpgrade netcf-develUpgrade netcf-libsUpgrade libiscsi-utilsUpgrade sgabiosUpgrade libiscsiUpgrade sgabios-bin | May 4, 2022 | Mar 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade qemu-ui-sdlUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-kvm-coreUpgrade qemu-guest-agentUpgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemu-imgUpgrade qemuUpgrade qemu-system-x86-coreUpgrade qemu-audio-sdlUpgrade qemu-kvmUpgrade qemu-block-nfsUpgrade qemu-ui-gtkUpgrade qemu-user-binfmtUpgrade qemu-block-curlUpgrade qemu-system-aarch64-coreUpgrade qemu-debuginfoUpgrade qemu-ui-cursesUpgrade qemu-userUpgrade qemu-audio-ossUpgrade qemu-system-aarch64Upgrade qemu-audio-alsaUpgrade qemu-system-x86Upgrade qemu-block-dmgUpgrade qemu-audio-paUpgrade ivshmem-toolsUpgrade qemu-user-static | Nov 12, 2020 | Mar 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 5, 2020 |
| Centos_linux | — | Upgrade perl-Sys-GuestfsUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-debugsourceUpgrade netcf-debuginfoUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-dbus-debugsourceUpgrade python3-hivexUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libiscsi-debugsourceUpgrade qemu-kvm-toolsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-imgUpgrade libiscsi-debuginfoUpgrade libguestfs-java-debuginfoUpgrade python3-libvirt-debuginfoUpgrade hivexUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-example-plugins-debuginfoUpgrade supermin-debugsourceUpgrade qemu-kvm-block-curlUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-block-sshUpgrade ruby-libguestfsUpgrade virt-dib-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade nbdkitUpgrade libguestfs-develUpgrade libiscsi-utilsUpgrade python3-libguestfsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-jaUpgrade libvirtUpgrade qemu-img-debuginfoUpgrade perl-Sys-VirtUpgrade netcf-debugsourceUpgrade libguestfs-javaUpgrade libvirt-debugsourceUpgrade nbdkit-plugin-vddkUpgrade libvirt-libsUpgrade libvirt-client-debuginfoUpgrade libguestfs-gobjectUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade qemu-guest-agentUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-bash-completionUpgrade qemu-kvm-maUpgrade superminUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkit-debuginfoUpgrade nbdkit-debugsourceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade virt-v2v-debuginfoUpgrade sgabiosUpgrade qemu-kvm-block-rbdUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-rescueUpgrade libguestfs-java-develUpgrade libvirt-python-debugsourceUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-plugin-python-commonUpgrade nbdkit-basic-pluginsUpgrade nbdkit-plugin-gzipUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-lock-sanlockUpgrade qemu-guest-agent-debuginfoUpgrade libiscsiUpgrade virt-v2vUpgrade libguestfs-toolsUpgrade libguestfs-gfs2Upgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-debuginfoUpgrade nbdkit-example-pluginsUpgrade python3-libguestfs-debuginfoUpgrade libvirt-develUpgrade libguestfs-gobject-develUpgrade ruby-hivexUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-clientUpgrade libvirt-libs-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade ruby-hivex-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-winsupportUpgrade seavgabios-binUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-nss-debuginfoUpgrade hivex-debugsourceUpgrade libvirt-daemon-config-networkUpgrade virt-dibUpgrade hivex-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libguestfs-debugsourceUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-network-debuginfoUpgrade perl-hivex-debuginfoUpgrade libvirt-admin-debuginfoUpgrade supermin-debuginfoUpgrade supermin-develUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-docsUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-plugin-xzUpgrade seabiosUpgrade libguestfs-gobject-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade netcf-develUpgrade netcf-libsUpgrade libvirt-daemon-driver-nwfilterUpgrade hivex-develUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-rbdUpgrade netcfUpgrade libvirt-nssUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvmUpgrade python3-libvirtUpgrade perl-hivexUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfs-javadocUpgrade nbdkit-develUpgrade qemu-img-maUpgrade seabios-binUpgrade libvirt-daemon-debuginfoUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-common-maUpgrade nbdkit-plugin-python3Upgrade libguestfs-xfsUpgrade libguestfsUpgrade libiscsi-develUpgrade qemu-kvm-tools-maUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-common-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-kvm | Jul 2, 2020 | Mar 5, 2020 |
| Debian | — | Upgrade qemu | Apr 29, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-img | Nov 3, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Sep 28, 2020 | Mar 5, 2020 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-xfsUpgrade virt-v2vUpgrade seabiosUpgrade libguestfs-javadocUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-testsUpgrade python3-libvirtUpgrade libguestfs-java-develUpgrade libguestfs-rsyncUpgrade ocaml-hivex-develUpgrade libguestfs-develUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-toolsUpgrade libiscsi-utilsUpgrade hivex-develUpgrade ocaml-libguestfsUpgrade seabios-binUpgrade virt-dibUpgrade libvirt-daemon-driver-storageUpgrade libvirt-adminUpgrade perl-Sys-VirtUpgrade superminUpgrade qemu-guest-agentUpgrade netcf-libsUpgrade ocaml-hivexUpgrade sgabios-binUpgrade qemu-kvm-block-curlUpgrade libguestfs-javaUpgrade libvirt-daemonUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-benchmarkingUpgrade nbdkit-bash-completionUpgrade ocaml-libguestfs-develUpgrade libguestfs-gfs2Upgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-dbusUpgrade libguestfs-tools-cUpgrade libvirt-clientUpgrade nbdkitUpgrade qemu-kvmUpgrade netcfUpgrade libguestfs-man-pages-ukUpgrade nbdkit-plugin-python3Upgrade python3-hivexUpgrade libvirt-develUpgrade supermin-develUpgrade libiscsi-develUpgrade qemu-kvm-commonUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-man-pages-jaUpgrade perl-Sys-GuestfsUpgrade libvirt-libsUpgrade sgabiosUpgrade seavgabios-binUpgrade libvirtUpgrade libvirt-nssUpgrade qemu-kvm-coreUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-scsiUpgrade ruby-libguestfsUpgrade qemu-kvm-block-glusterUpgrade perl-hivexUpgrade netcf-develUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-bash-completionUpgrade libguestfs-rescueUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-gobject-develUpgrade libguestfs-gobjectUpgrade nbdkit-develUpgrade qemu-kvm-block-rbdUpgrade libvirt-docsUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-winsupportUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-toolsUpgrade qemu-kvm-block-sshUpgrade python3-libguestfsUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-networkUpgrade qemu-imgUpgrade hivexUpgrade nbdkit-basic-pluginsUpgrade lua-guestfsUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-disk | Jul 22, 2020 | Sep 17, 2019 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-xfsUpgrade libvirt-bash-completionUpgrade seabiosUpgrade supermin-debuginfoUpgrade qemu-guest-agentUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-bash-completionUpgrade nbdkit-basic-plugins-debuginfoUpgrade nbdkit-develUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-toolsUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemonUpgrade sgabiosUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirtUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade superminUpgrade libguestfs-gobject-debuginfoUpgrade ocaml-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-img-debuginfoUpgrade nbdkit-debuginfoUpgrade nbdkit-plugin-xzUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-develUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-maUpgrade libvirt-daemon-driver-storage-mpathUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-rescueUpgrade python3-libguestfsUpgrade virt-v2vUpgrade virt-dib-debuginfoUpgrade ruby-hivex-debuginfoUpgrade python3-hivexUpgrade libguestfs-gfs2Upgrade qemu-kvm-common-rhevUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-kvm-block-sshUpgrade hivex-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-clientUpgrade libiscsi-debuginfoUpgrade netcf-libs-debuginfoUpgrade perl-hivex-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-commonUpgrade libguestfs-javadocUpgrade python3-hivex-debuginfoUpgrade libvirt-nssUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-nss-debuginfoUpgrade qemu-img-maUpgrade qemu-kvm-tests-debuginfoUpgrade netcfUpgrade libvirt-adminUpgrade python3-libvirt-debuginfoUpgrade qemu-kvm-tools-rhevUpgrade lua-guestfsUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-curlUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libiscsi-utilsUpgrade nbdkit-plugin-python3-debuginfoUpgrade qemu-kvm-tools-maUpgrade SLOFUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkitUpgrade qemu-kvmUpgrade libguestfs-rsyncUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade hivex-develUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-core-debuginfoUpgrade virt-dibUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade perl-hivexUpgrade ocaml-libguestfs-develUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-example-plugins-debuginfoUpgrade ocaml-libguestfsUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade seabios-binUpgrade libiscsi-debugsourceUpgrade libguestfs-man-pages-jaUpgrade ocaml-hivex-develUpgrade sgabios-binUpgrade qemu-kvm-rhev-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-plugin-python3Upgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-img-rhevUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-coreUpgrade nbdkit-plugin-gzipUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-common-maUpgrade libvirt-python-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-rhevUpgrade perl-Sys-VirtUpgrade netcf-debugsourceUpgrade nbdkit-plugin-vddkUpgrade lua-guestfs-debuginfoUpgrade libguestfs-javaUpgrade ruby-libguestfsUpgrade libguestfs-tools-cUpgrade python3-libguestfs-debuginfoUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-debuginfoUpgrade libguestfs-java-develUpgrade ruby-hivexUpgrade libguestfs-develUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-imgUpgrade libvirt-libsUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-debuginfoUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade python3-libvirtUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-dbusUpgrade libvirt-debugsourceUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade netcf-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libiscsi-develUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-testsUpgrade libvirt-daemon-driver-storage-diskUpgrade seavgabios-binUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-docsUpgrade qemu-kvm-block-iscsiUpgrade libiscsiUpgrade ocaml-libguestfs-debuginfoUpgrade ocaml-hivexUpgrade libguestfs-gobjectUpgrade netcf-develUpgrade libguestfs-winsupportUpgrade libguestfs-gobject-develUpgrade nbdkit-bash-completionUpgrade virt-v2v-debuginfoUpgrade supermin-develUpgrade netcf-libsUpgrade nbdkit-basic-pluginsUpgrade hivexUpgrade libvirt-daemon-debuginfo | Jul 2, 2020 | Mar 5, 2020 |
| Rocky_linux | — | Upgrade libiscsi-debugsourceUpgrade netcf-develUpgrade libiscsi-develUpgrade libiscsi-debuginfoUpgrade libiscsiUpgrade netcf-libs-debuginfoUpgrade netcfUpgrade libiscsi-utilsUpgrade sgabiosUpgrade netcf-libsUpgrade netcf-debugsourceUpgrade netcf-debuginfoUpgrade libiscsi-utils-debuginfo | Mar 12, 2024 | Mar 5, 2020 |
| Suse | — | Upgrade qemu-vgabiosUpgrade qemu-audio-sdlUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-ksmUpgrade qemu-block-curlUpgrade qemu-s390Upgrade qemu-audio-paUpgrade qemu-block-dmgUpgrade qemu-langUpgrade qemu-seabiosUpgrade qemu-x86Upgrade qemu-extraUpgrade qemu-audio-ossUpgrade qemu-linux-userUpgrade qemu-sgabiosUpgrade qemu-block-nfsUpgrade qemuUpgrade qemu-armUpgrade qemu-ui-sdlUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemu-toolsUpgrade qemu-ui-cursesUpgrade qemu-block-glusterUpgrade qemu-ppc | Apr 2, 2020 | Mar 5, 2020 |
| Ubuntu | — | Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-aarch64Upgrade qemuUpgrade qemu-system-sparcUpgrade qemu-system-ppc | May 22, 2020 | Mar 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub