libvncserver.so is vulnerable to denial of service(DoS) attack. The issue exists as an out-of-bounds access from the encoding function in libvncserver/sockets.c
.
lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html
lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html
lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html
cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
github.com/LibVNC/libvncserver/commit/57433015f856cc12753378254ce4f1c78f5d9c7b
github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13
usn.ubuntu.com/4434-1/