vulnerability

Red Hat: CVE-2018-20023: libvncserver: Improper initialization in VNC Repeater client code allows for information disclosure

Name: Red Hat: CVE-2018-20023: libvncserver: Improper initialization in VNC Repeater client code allows for information disclosure
Creator: Red Hat
Published: 2018-12-19T00:00:00.000Z
Keywords: CVE, Red Hat, 2018, 20023, libvncserver, no-fix-redhat-rpm-package, Severity 5

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

Dec 19, 2018

Added

Jul 9, 2025

Modified

Jul 9, 2025

Description

LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used to leak stack memory layout and in bypassing ASLR

Solution

no-fix-redhat-rpm-package

References

NVD-CVE-2018-20023

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report