SUSE CVE-2018-21247

An issue was discovered in LibVNCServer before 0.9.13. There is an information leak of uninitialized memory contents in the libvncclient/rfbproto.c ConnectToRFBRepeater function...

The vulnerability of the implementation of the ConnectToRFBRepeater function in the cross-platform library LibVNCServer allows a hacker to cause a service failure.

The vulnerability of the ConnectToRFBRepeater function implementation in the cross-platform library LibVNCServer is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...