An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL pointer dereference.
{ "binaries": [ { "binary_name": "libvncclient1", "binary_version": "0.9.12+dfsg-9ubuntu0.2" }, { "binary_name": "libvncclient1-dbgsym", "binary_version": "0.9.12+dfsg-9ubuntu0.2" }, { "binary_name": "libvncserver-dev", "binary_version": "0.9.12+dfsg-9ubuntu0.2" }, { "binary_name": "libvncserver1", "binary_version": "0.9.12+dfsg-9ubuntu0.2" }, { "binary_name": "libvncserver1-dbgsym", "binary_version": "0.9.12+dfsg-9ubuntu0.2" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }