<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 12:56:44 +0000</lastBuildDate>
    <item>
      <title>CVE-2018-7225</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2018-7225</link>
      <description>&lt;p&gt;An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2018-7225</guid>
    </item>
    <item>
      <title>USN-3618-1 — libvncserver vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/usn-3618-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:14.04:LTS: libvncserver, Ubuntu:16.04:LTS: libvncserver&lt;/p&gt;
&lt;p&gt;It was discovered that LibVNCServer incorrectly handled certain packet
lengths. A remote attacker able to connect to a LibVNCServer could possibly
use this issue to obtain sensitive information, cause a denial of service,
or execute arbitrary code.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:14.04:LTS: libvncserver, Ubuntu:16.04:LTS: libvncserver&lt;/p&gt;
&lt;p&gt;It was discovered that LibVNCServer incorrectly handled certain packet
lengths. A remote attacker able to connect to a LibVNCServer could possibly
use this issue to obtain sensitive information, cause a denial of service,
or execute arbitrary code.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-3618-1</guid>
    </item>
  </channel>
</rss>
