Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2018-20022

25
FAUCET Score

CVE-2018-20022 is an Improper Initialization vulnerability (CWE-665) in LibVNC client code, affecting various Canonical and Debian Linux distributions and LibVNCserver. This flaw allows an unauthenticated attacker to remotely read stack memory, leading to information disclosure and potentially bypassing ASLR when combined with other vulnerabilities. With a CVSS score of 7.5 (High), it presents a significant risk due to its network-based attack vector and low attack complexity. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity landscape.

Impacted Technologies

VendorProductVersion(s)CPE
< 0.9.12CPE matchmatch criteria
cpe:2.3:a:libvnc_project:libvncserver:*:*:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
9.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
14.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
16.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

CVSS Data

CVSS version used by this source: 3.0

7.5HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.0

Exploit Intelligence

EPSS Score
2.94%
Probability of exploitation in next 30 days
EPSS Percentile
85.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0294 is in the 74th percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (3)

redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: libvncserver
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: libvncserver
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: libvncserver

Vendor Advisories (1)

redhatCVE-2018-20022Low

libvncserver: Improper initialization in VNC client code allows for information disclosure

Dec 19, 2018

References

ics-cert.kaspersky.com / advisories/klcert-advisories/2018/12/19/klcert-18-032-libvnc-multiple-memory-leaks
Third Party Advisory
lists.debian.org / debian-lts-announce/2018/12/msg00017.html
Mailing ListThird Party Advisory
lists.debian.org / debian-lts-announce/2019/10/msg00042.html
lists.debian.org / debian-lts-announce/2019/11/msg00033.html
lists.debian.org / debian-lts-announce/2019/12/msg00028.html
security.gentoo.org / glsa/201908-05
security.gentoo.org / glsa/202006-06
usn.ubuntu.com / 3877-1
Third Party Advisory
usn.ubuntu.com / 4547-1
usn.ubuntu.com / 4547-2
usn.ubuntu.com / 4587-1
debian.org / security/2019/dsa-4383
Third Party Advisory