View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2018-21247 severity important: SUSE including 23 source package names (LibVNCServer, LibVNCServer-devel-0.9.10-4.22.1, …), 87 product×package rows across 49 product lines (HPE Helion OpenStack 8, SUSE Enterprise Storage 5, … (49 product lines)): Fixed 84, Known Not Affected 3.
An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.