An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.
Created libvncserver tracking bugs for this issue:
Affects: epel-7 [bug 1849888]
Affects: fedora-all [bug 1849887]
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):
This issue has been addressed in the following products:
Red Hat Enterprise Linux 8
Via RHSA-2021:1811 https://access.redhat.com/errata/RHSA-2021:1811