https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T23:37:48.246026+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2018-7225 CVE-2018-7225 2026-10-03T23:37:48.703742+00:00

An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.

 https://vulnerability.circl.lu/vuln/usn-3618-1 USN-3618-1 — libvncserver vulnerability 2026-10-03T23:37:48.703874+00:00

Affected: Ubuntu:14.04:LTS: libvncserver, Ubuntu:16.04:LTS: libvncserver

It was discovered that LibVNCServer incorrectly handled certain packet lengths. A remote attacker able to connect to a LibVNCServer could possibly use this issue to obtain sensitive information, cause a denial of service, or execute arbitrary code.