An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL pointer dereference.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.9.12+dfsg-9ubuntu0.2", "binary_name": "libvncclient1" }, { "binary_version": "0.9.12+dfsg-9ubuntu0.2", "binary_name": "libvncclient1-dbgsym" }, { "binary_version": "0.9.12+dfsg-9ubuntu0.2", "binary_name": "libvncserver-dev" }, { "binary_version": "0.9.12+dfsg-9ubuntu0.2", "binary_name": "libvncserver1" }, { "binary_version": "0.9.12+dfsg-9ubuntu0.2", "binary_name": "libvncserver1-dbgsym" } ] }