QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade netcf-libsUpgrade netcfUpgrade libiscsi-develUpgrade netcf-develUpgrade libiscsi-utilsUpgrade sgabios-binUpgrade sgabiosUpgrade libiscsi | May 4, 2022 | Mar 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade qemu-debuginfoUpgrade ivshmem-toolsUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-system-aarch64Upgrade qemu-block-dmgUpgrade qemu-audio-paUpgrade qemu-system-aarch64-coreUpgrade qemu-audio-ossUpgrade qemu-block-nfsUpgrade qemu-ui-cursesUpgrade qemu-ui-gtkUpgrade qemu-userUpgrade qemu-user-staticUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-user-binfmtUpgrade qemu-audio-sdlUpgrade qemuUpgrade qemu-ui-sdlUpgrade qemu-kvm-coreUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-commonUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-system-x86-coreUpgrade qemu-img | Nov 12, 2020 | Mar 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 5, 2020 |
| Centos_linux | — | Upgrade netcf-debugsourceUpgrade python3-libguestfsUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-plugin-python-commonUpgrade libiscsi-utils-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade sgabios-binUpgrade qemu-kvm-debuginfoUpgrade perl-Sys-GuestfsUpgrade nbdkit-bash-completionUpgrade nbdkit-debugsourceUpgrade superminUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-bash-completionUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-java-develUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-debuginfoUpgrade nbdkit-plugin-gzipUpgrade virt-dib-debuginfoUpgrade nbdkit-basic-pluginsUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade virt-v2v-debuginfoUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade nbdkitUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade hivexUpgrade libguestfs-javaUpgrade libguestfs-benchmarking-debuginfoUpgrade libiscsi-utilsUpgrade perl-Sys-VirtUpgrade qemu-imgUpgrade python3-libvirt-debuginfoUpgrade libguestfs-gobjectUpgrade libguestfs-rescueUpgrade libvirt-dbusUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-img-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libguestfs-rsyncUpgrade ruby-libguestfsUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-tools-cUpgrade qemu-kvm-debugsourceUpgrade libvirt-lock-sanlockUpgrade libvirt-lock-sanlock-debuginfoUpgrade qemu-kvm-block-sshUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libiscsiUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-toolsUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-python-debugsourceUpgrade libguestfs-man-pages-jaUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-block-rbdUpgrade lua-guestfs-debuginfoUpgrade python3-hivexUpgrade sgabiosUpgrade netcf-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-client-debuginfoUpgrade libiscsi-debugsourceUpgrade qemu-kvm-maUpgrade netcf-libs-debuginfoUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade hivex-develUpgrade libvirt-daemonUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade qemu-kvm-block-glusterUpgrade netcf-develUpgrade libvirt-clientUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-tools-maUpgrade libiscsi-develUpgrade libvirt-nssUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-xfsUpgrade seabiosUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-man-pages-ukUpgrade netcfUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade nbdkit-plugin-xzUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade netcf-libsUpgrade libvirt-admin-debuginfoUpgrade python3-libvirtUpgrade nbdkit-develUpgrade supermin-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfs-inspect-iconsUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-docsUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvmUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-javadocUpgrade qemu-img-maUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-common-maUpgrade seabios-binUpgrade virt-v2vUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-develUpgrade libguestfs-toolsUpgrade libguestfs-benchmarkingUpgrade libguestfs-gfs2Upgrade qemu-kvm-commonUpgrade libguestfsUpgrade libguestfs-gobject-develUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-debuginfoUpgrade seavgabios-binUpgrade ruby-hivexUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-adminUpgrade libvirt-nss-debuginfoUpgrade libguestfs-winsupportUpgrade hivex-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-kvmUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-config-networkUpgrade nbdkit-example-pluginsUpgrade virt-dibUpgrade libguestfs-debugsourceUpgrade lua-guestfsUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storage-diskUpgrade supermin-devel | Jul 2, 2020 | Mar 5, 2020 |
| Debian | — | Upgrade qemu | Apr 29, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-img | Nov 3, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Sep 28, 2020 | Mar 5, 2020 |
| Oracle_linux | — | Upgrade python3-libguestfsUpgrade nbdkit-plugin-vddkUpgrade nbdkit-develUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvm-block-glusterUpgrade libvirt-docsUpgrade netcf-develUpgrade qemu-kvm-toolsUpgrade libguestfs-rescueUpgrade qemu-kvm-block-rbdUpgrade libvirt-bash-completionUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade ruby-hivexUpgrade nbdkit-plugin-python-commonUpgrade qemu-imgUpgrade nbdkit-plugin-gzipUpgrade hivexUpgrade perl-hivexUpgrade perl-Sys-GuestfsUpgrade libvirt-lock-sanlockUpgrade libguestfs-winsupportUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-nodedevUpgrade sgabiosUpgrade libvirt-libsUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-glusterUpgrade seavgabios-binUpgrade libguestfs-gobjectUpgrade libvirtUpgrade libguestfs-gobject-develUpgrade ruby-libguestfsUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-man-pages-jaUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-coreUpgrade nbdkit-bash-completionUpgrade superminUpgrade sgabios-binUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-develUpgrade netcfUpgrade nbdkitUpgrade libvirt-clientUpgrade libvirt-daemon-kvmUpgrade libguestfs-xfsUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemonUpgrade ocaml-hivexUpgrade netcf-libsUpgrade libvirt-daemon-config-networkUpgrade libguestfs-tools-cUpgrade libguestfs-javaUpgrade libvirt-dbusUpgrade libguestfs-develUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-javadocUpgrade libiscsi-develUpgrade qemu-guest-agentUpgrade ocaml-libguestfs-develUpgrade perl-Sys-VirtUpgrade qemu-kvm-block-iscsiUpgrade ocaml-libguestfsUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-testsUpgrade hivex-develUpgrade libguestfs-java-develUpgrade python3-hivexUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-curlUpgrade libiscsi-utilsUpgrade qemu-kvm-commonUpgrade libguestfs-gfs2Upgrade supermin-develUpgrade libguestfs-toolsUpgrade virt-dibUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-nwfilterUpgrade seabios-binUpgrade libguestfs-benchmarkingUpgrade libvirt-adminUpgrade ocaml-hivex-develUpgrade virt-v2vUpgrade seabiosUpgrade qemu-kvmUpgrade python3-libvirtUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storage-mpath | Jul 22, 2020 | Sep 17, 2019 |
| Redhat_linux | — | Upgrade libvirt-libsUpgrade qemu-imgUpgrade SLOFUpgrade libvirt-lock-sanlockUpgrade libguestfs-develUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade python3-libvirtUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libiscsiUpgrade libguestfs-man-pages-jaUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-nwfilterUpgrade netcf-develUpgrade lua-guestfs-debuginfoUpgrade nbdkit-debugsourceUpgrade perl-hivexUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-secretUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-img-rhevUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-rsyncUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-winsupportUpgrade virt-v2v-debuginfoUpgrade netcf-debuginfoUpgrade libguestfs-debugsourceUpgrade libiscsi-develUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-block-iscsiUpgrade libiscsi-debugsourceUpgrade qemu-kvm-coreUpgrade libguestfs-java-develUpgrade nbdkit-example-plugins-debuginfoUpgrade ocaml-hivex-develUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade supermin-develUpgrade libvirt-libs-debuginfoUpgrade netcf-libsUpgrade seabios-binUpgrade ocaml-hivexUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-testsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-debugsourceUpgrade ocaml-libguestfsUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade perl-Sys-VirtUpgrade libvirt-docsUpgrade ruby-libguestfsUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-common-maUpgrade libvirt-daemon-driver-storageUpgrade libvirt-client-debuginfoUpgrade nbdkit-plugin-vddkUpgrade hivexUpgrade libguestfs-javaUpgrade qemu-kvm-rhevUpgrade libvirt-admin-debuginfoUpgrade libvirt-python-debugsourceUpgrade netcf-debugsourceUpgrade libguestfs-tools-cUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-rhev-debuginfoUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade ocaml-libguestfs-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfsUpgrade libguestfs-debuginfoUpgrade supermin-debugsourceUpgrade ocaml-libguestfs-develUpgrade libvirt-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-bash-completionUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-core-debuginfoUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-tools-maUpgrade hivex-develUpgrade nbdkit-plugin-vddk-debuginfoUpgrade seavgabios-binUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-gobject-develUpgrade ruby-hivexUpgrade nbdkitUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-dbusUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade hivex-debugsourceUpgrade lua-guestfsUpgrade virt-v2vUpgrade libguestfs-toolsUpgrade nbdkit-plugin-python3-debuginfoUpgrade python3-libguestfsUpgrade qemu-kvm-tools-rhevUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-adminUpgrade libvirt-develUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-block-sshUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-toolsUpgrade libguestfs-bash-completionUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-nodedevUpgrade python3-hivexUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-block-rbdUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-gfs2Upgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade seabiosUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-config-networkUpgrade perl-Sys-Guestfs-debuginfoUpgrade nbdkit-develUpgrade qemu-kvm-tests-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade ocaml-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-maUpgrade qemu-img-debuginfoUpgrade libvirt-daemonUpgrade libvirt-nss-debuginfoUpgrade libguestfs-javadocUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-img-maUpgrade superminUpgrade libvirt-nssUpgrade netcfUpgrade qemu-kvm-block-glusterUpgrade libvirtUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-common-rhevUpgrade sgabiosUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-bash-completionUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-xfsUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libiscsi-utilsUpgrade qemu-guest-agentUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-clientUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libguestfs-man-pages-ukUpgrade supermin-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade python3-hivex-debuginfoUpgrade netcf-libs-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-commonUpgrade perl-hivex-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libiscsi-debuginfoUpgrade virt-dib-debuginfoUpgrade nbdkit-plugin-xz | Jul 2, 2020 | Mar 5, 2020 |
| Rocky_linux | — | Upgrade libiscsi-utils-debuginfoUpgrade netcf-debuginfoUpgrade sgabiosUpgrade netcfUpgrade libiscsi-utilsUpgrade netcf-libsUpgrade netcf-debugsourceUpgrade netcf-libs-debuginfoUpgrade libiscsiUpgrade libiscsi-develUpgrade libiscsi-debugsourceUpgrade netcf-develUpgrade libiscsi-debuginfo | Mar 12, 2024 | Mar 5, 2020 |
| Suse | — | Upgrade qemu-block-glusterUpgrade qemu-ppcUpgrade qemu-block-nfsUpgrade qemu-armUpgrade qemuUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemu-ui-sdlUpgrade qemu-audio-ossUpgrade qemu-linux-userUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-ui-cursesUpgrade qemu-block-iscsiUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade qemu-s390Upgrade qemu-extraUpgrade qemu-audio-paUpgrade qemu-block-curlUpgrade qemu-ksmUpgrade qemu-seabiosUpgrade qemu-guest-agentUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-audio-sdlUpgrade qemu-audio-alsaUpgrade qemu-langUpgrade qemu-block-dmgUpgrade qemu-ui-gtk | Apr 2, 2020 | Mar 5, 2020 |
| Ubuntu | — | Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemuUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro) | May 22, 2020 | Mar 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub