CVE:CVE-2019-20382
CNNVD:CNNVD-202003-214
QEMU（Quick Emulator）是法国法布里斯-贝拉（Fabrice Bellard）软件开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU 4.1.0版本中的ui/vnc-enc-zrle.c文件的zrle_compress_data存在安全漏洞。攻击者可通过连接到VNC服务器利用该漏洞造成拒绝服务（内存泄露）。
solution:Upgrade qemu qemu to a higher version than 4.1.0,and avoid the version 4.1.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.10,20.04,and avoid the version 16.04,18.04,19.10,20.04