High

DATE	CVE	VULNERABILITY TITLE	RISK
2018-12-19	CVE-2018-20022	Improper Initialization vulnerability in multiple products LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allows attacker to read stack memory and can be abuse for information disclosure. network low complexity libvnc-project debian canonical CWE-665	7.5
2018-12-19	CVE-2018-20021	Infinite Loop vulnerability in multiple products LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. network low complexity libvnc-project debian canonical CWE-835	7.5