SUSE CVE-2019-20382

QEMU 4.1.0 has a memory leak in zrlecompressdata in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd...

The vulnerability of the zrle_compress_data function in the software for emulating hardware on various QEMU platforms arises from improper memory release before deleting the last reference. This allows a malicious actor to trigger a service failure.

The vulnerability of the zrlecompressdata function in the software for emulating hardware on various QEMU platforms is related to improper memory release before deleting the last pointer. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...