Improper Initialization Vulnerability in LibVNC Affected by Multiple Versions

CVE-2018-20022

What is CVE-2018-20022?

LibVNC prior to a specific commit is vulnerable to improper initialization, allowing attackers to potentially read stack memory. This flaw can lead to information disclosure and may be exploited in conjunction with other vulnerabilities to bypass Address Space Layout Randomization (ASLR), exposing a deeper stack memory layout that can be leveraged for further attacks.

References