libvncserver is vulenrable to denial of service. The vulnerability exists through a NULL pointer dereference flaw was found in the way LibVNCServer handledcertain ClientCutText message.
lists.opensuse.org/opensuse-updates/2015-12/msg00022.html
seclists.org/oss-sec/2014/q3/639
secunia.com/advisories/61506
secunia.com/advisories/61682
ubuntu.com/usn/usn-2365-1
www.debian.org/security/2014/dsa-3081
www.ocert.org/advisories/ocert-2014-007.html
www.openwall.com/lists/oss-security/2014/09/25/11
access.redhat.com/security/updates/classification/#moderate
github.com/newsoft/libvncserver/commit/6037a9074d52b1963c97cb28ea1096c7c14cbf28
lists.debian.org/debian-lts-announce/2019/10/msg00042.html
lists.debian.org/debian-lts-announce/2019/11/msg00032.html
lists.debian.org/debian-lts-announce/2019/12/msg00028.html
rhn.redhat.com/errata/RHSA-2014-1826.html
security.gentoo.org/glsa/201507-07
usn.ubuntu.com/4573-1/
usn.ubuntu.com/4587-1/