QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade netcf-libsUpgrade libiscsi-develUpgrade netcf-develUpgrade netcfUpgrade libiscsi-utilsUpgrade sgabios-binUpgrade sgabiosUpgrade libiscsi | May 4, 2022 | Mar 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade qemu-audio-ossUpgrade qemu-system-aarch64Upgrade qemu-block-nfsUpgrade qemu-block-dmgUpgrade qemu-userUpgrade qemu-system-x86Upgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade ivshmem-toolsUpgrade qemu-audio-alsaUpgrade qemu-debuginfoUpgrade qemu-block-curlUpgrade qemu-user-binfmtUpgrade qemu-ui-cursesUpgrade qemu-user-staticUpgrade qemu-kvmUpgrade qemu-system-aarch64-coreUpgrade qemu-ui-sdlUpgrade qemu-imgUpgrade qemu-system-x86-coreUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-audio-sdlUpgrade qemu-kvm-coreUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemuUpgrade qemu-common | Nov 12, 2020 | Mar 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 5, 2020 |
| Centos_linux | — | Upgrade libguestfs-java-debuginfoUpgrade libiscsi-debugsourceUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkitUpgrade libguestfs-develUpgrade nbdkit-bash-completionUpgrade libiscsiUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade superminUpgrade qemu-kvm-debuginfoUpgrade libguestfs-man-pages-jaUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-python-debugsourceUpgrade qemu-kvm-block-curlUpgrade supermin-debugsourceUpgrade nbdkit-debuginfoUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade perl-Sys-Guestfs-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade sgabios-binUpgrade libvirt-lock-sanlockUpgrade libguestfs-java-develUpgrade libvirtUpgrade libvirt-dbusUpgrade perl-Sys-GuestfsUpgrade qemu-imgUpgrade python3-hivex-debuginfoUpgrade libvirt-libsUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-tools-cUpgrade libguestfs-javaUpgrade qemu-kvm-toolsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-rsyncUpgrade libiscsi-debuginfoUpgrade nbdkit-basic-pluginsUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-img-debuginfoUpgrade perl-Sys-VirtUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-coreUpgrade python3-hivexUpgrade libguestfs-benchmarking-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-debugsourceUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-guest-agentUpgrade nbdkit-plugin-python-commonUpgrade python3-libguestfsUpgrade libvirt-lock-sanlock-debuginfoUpgrade sgabiosUpgrade libguestfs-bash-completionUpgrade libguestfs-rescueUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-plugin-vddkUpgrade hivexUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-maUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-client-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libiscsi-utilsUpgrade python3-libvirt-debuginfoUpgrade seabiosUpgrade libvirt-admin-debuginfoUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-glusterUpgrade netcf-develUpgrade nbdkit-develUpgrade libvirt-daemon-config-networkUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-common-maUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-gobject-debuginfoUpgrade libguestfs-debugsourceUpgrade nbdkit-plugin-vddk-debuginfoUpgrade netcfUpgrade libvirt-bash-completionUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-man-pages-ukUpgrade perl-hivex-debuginfoUpgrade libiscsi-develUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-nssUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-diskUpgrade supermin-develUpgrade netcf-libsUpgrade supermin-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-xzUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-daemonUpgrade hivex-develUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-nss-debuginfoUpgrade libguestfs-gfs2Upgrade libvirt-daemon-kvmUpgrade nbdkit-example-pluginsUpgrade libguestfsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-libs-debuginfoUpgrade qemu-kvm-commonUpgrade nbdkit-plugin-xz-debuginfoUpgrade ruby-hivexUpgrade libguestfs-benchmarkingUpgrade seavgabios-binUpgrade libvirt-daemon-driver-qemuUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-develUpgrade libguestfs-gobject-develUpgrade libvirt-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade ruby-hivex-debuginfoUpgrade hivex-debuginfoUpgrade libguestfs-winsupportUpgrade libvirt-docsUpgrade libvirt-adminUpgrade hivex-debugsourceUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade virt-v2vUpgrade virt-dibUpgrade qemu-kvm-tools-maUpgrade qemu-img-maUpgrade libguestfs-xfsUpgrade qemu-kvmUpgrade python3-libvirtUpgrade nbdkit-plugin-python3Upgrade lua-guestfsUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-javadocUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-gluster | Jul 2, 2020 | Mar 5, 2020 |
| Debian | — | Upgrade qemu | Apr 29, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-img | Nov 3, 2020 | Mar 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Sep 28, 2020 | Mar 5, 2020 |
| Oracle_linux | — | Upgrade ruby-hivexUpgrade hivexUpgrade libvirt-libsUpgrade seavgabios-binUpgrade libvirt-daemon-driver-nodedevUpgrade sgabiosUpgrade libvirt-nssUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-config-nwfilterUpgrade perl-Sys-GuestfsUpgrade libguestfs-inspect-iconsUpgrade nbdkit-plugin-gzipUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirtUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-block-sshUpgrade libguestfs-gobjectUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-imgUpgrade lua-guestfsUpgrade netcf-develUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-toolsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-bash-completionUpgrade nbdkit-develUpgrade ruby-libguestfsUpgrade python3-libguestfsUpgrade nbdkit-plugin-vddkUpgrade libvirt-docsUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfsUpgrade libvirt-lock-sanlockUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-coreUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvmUpgrade python3-libvirtUpgrade nbdkit-plugin-xzUpgrade ocaml-hivex-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade netcfUpgrade libiscsi-develUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-interfaceUpgrade ocaml-hivexUpgrade netcf-libsUpgrade seabiosUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-xfsUpgrade libguestfs-man-pages-ukUpgrade virt-v2vUpgrade supermin-develUpgrade libvirt-develUpgrade superminUpgrade sgabios-binUpgrade perl-Sys-VirtUpgrade libguestfs-javadocUpgrade libguestfs-java-develUpgrade qemu-kvm-testsUpgrade qemu-guest-agentUpgrade ocaml-libguestfsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libiscsi-utilsUpgrade libguestfs-toolsUpgrade hivex-develUpgrade virt-dibUpgrade seabios-binUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-curlUpgrade python3-hivexUpgrade nbdkitUpgrade libvirt-clientUpgrade libguestfs-bash-completionUpgrade nbdkit-bash-completionUpgrade qemu-kvm-commonUpgrade libguestfs-gfs2Upgrade libvirt-adminUpgrade libguestfs-javaUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libguestfs-tools-cUpgrade libguestfs-rsyncUpgrade ocaml-libguestfs-develUpgrade libvirt-dbusUpgrade nbdkit-example-pluginsUpgrade libguestfs-devel | Jul 22, 2020 | Sep 17, 2019 |
| Redhat_linux | — | Upgrade ocaml-hivexUpgrade libguestfs-develUpgrade libvirt-dbusUpgrade libvirt-admin-debuginfoUpgrade netcf-libsUpgrade supermin-develUpgrade libvirt-dbus-debugsourceUpgrade ocaml-hivex-develUpgrade libguestfs-winsupportUpgrade seabios-binUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-kvmUpgrade libguestfsUpgrade qemu-guest-agent-debuginfoUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade qemu-kvm-testsUpgrade libguestfs-java-develUpgrade supermin-debugsourceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libiscsi-develUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-tools-maUpgrade libvirt-libs-debuginfoUpgrade python3-libvirtUpgrade qemu-kvmUpgrade python3-libguestfs-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade ocaml-libguestfs-debuginfoUpgrade nbdkitUpgrade qemu-kvm-block-iscsiUpgrade virt-v2v-debuginfoUpgrade nbdkit-plugin-python3Upgrade perl-Sys-VirtUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade qemu-img-rhevUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade ruby-hivexUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-glusterUpgrade hivex-debugsourceUpgrade libguestfs-gobjectUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-debuginfoUpgrade ocaml-libguestfsUpgrade libvirt-daemon-driver-qemuUpgrade ocaml-libguestfs-develUpgrade libvirt-debugsourceUpgrade libvirt-lock-sanlockUpgrade SLOFUpgrade libguestfs-rsyncUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libiscsiUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade ruby-libguestfsUpgrade nbdkit-basic-pluginsUpgrade lua-guestfs-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade netcf-develUpgrade nbdkit-example-pluginsUpgrade virt-dibUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-gobject-develUpgrade sgabios-binUpgrade libguestfs-man-pages-jaUpgrade seavgabios-binUpgrade libvirt-docsUpgrade qemu-kvm-common-maUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade hivex-develUpgrade perl-hivexUpgrade nbdkit-debugsourceUpgrade nbdkit-bash-completionUpgrade libguestfs-java-debuginfoUpgrade libguestfs-javaUpgrade nbdkit-plugin-vddkUpgrade qemu-kvm-rhev-debuginfoUpgrade libvirt-client-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade netcf-debugsourceUpgrade qemu-kvm-rhevUpgrade libvirt-python-debugsourceUpgrade hivexUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-ma-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-toolsUpgrade virt-dib-debuginfoUpgrade python3-libvirt-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirtUpgrade nbdkit-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade perl-Sys-GuestfsUpgrade libguestfs-rescueUpgrade qemu-kvm-toolsUpgrade libiscsi-debuginfoUpgrade qemu-kvm-maUpgrade virt-v2vUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libiscsi-utilsUpgrade supermin-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-develUpgrade nbdkit-plugin-python3-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-common-rhevUpgrade qemu-guest-agentUpgrade libguestfs-bash-completionUpgrade libiscsi-utils-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-tools-rhevUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-Sys-Virt-debugsourceUpgrade python3-libguestfsUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade sgabiosUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade lua-guestfsUpgrade qemu-kvm-common-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-mpathUpgrade seabiosUpgrade nbdkit-plugin-python-commonUpgrade libvirt-adminUpgrade netcf-libs-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade qemu-kvm-block-glusterUpgrade qemu-img-maUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-javadocUpgrade netcfUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade python3-hivex-debuginfoUpgrade ocaml-hivex-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade nbdkit-plugin-xzUpgrade libguestfs-xfsUpgrade libguestfs-man-pages-ukUpgrade python3-hivexUpgrade libvirt-nssUpgrade libvirt-nss-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-bash-completionUpgrade supermin | Jul 2, 2020 | Mar 5, 2020 |
| Rocky_linux | — | Upgrade libiscsi-debuginfoUpgrade netcf-libs-debuginfoUpgrade libiscsiUpgrade libiscsi-develUpgrade netcf-develUpgrade libiscsi-debugsourceUpgrade netcf-debugsourceUpgrade netcf-debuginfoUpgrade netcf-libsUpgrade libiscsi-utilsUpgrade libiscsi-utils-debuginfoUpgrade sgabiosUpgrade netcf | Mar 12, 2024 | Mar 5, 2020 |
| Suse | — | Upgrade qemu-audio-sdlUpgrade qemu-vgabiosUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-x86Upgrade qemu-ksmUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-extraUpgrade qemu-audio-paUpgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-block-dmgUpgrade qemu-block-sshUpgrade qemu-ppcUpgrade qemu-ui-sdlUpgrade qemu-block-glusterUpgrade qemu-audio-ossUpgrade qemu-block-nfsUpgrade qemu-armUpgrade qemuUpgrade qemu-linux-userUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade qemu-toolsUpgrade qemu-ipxe | Apr 2, 2020 | Mar 5, 2020 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-aarch64Upgrade qemuUpgrade qemu-system-sparcUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-s390x | May 22, 2020 | Mar 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub