CVE-2019-20382

QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation…

published March 5, 2020

CVSS
—
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00866 · 58.3th percentile
Published
2020-03-05T18:27Z
EPSS history
Timeline
  • 05 MAR 18:27Z
    QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation…
    cvelistv5