CriticalFix available
libvncserver — security advisory
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
- Products
- libvncserver
- Affected versions
- Not specified
- Fixed versions
- 0.9.11-r1, 0.9.11-r2
- CVEs
- CVE-2018-7225
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 22:16 UTC · Revision 1
Source evidence
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
osv:ALPINE-CVE-2018-7225
libvncserver
Fixed versions: 0.9.11-r2
libvncserver
Fixed versions: 0.9.11-r2
libvncserver
Fixed versions: 0.9.11-r1
libvncserver
Fixed versions: 0.9.11-r1
libvncserver
Fixed versions: 0.9.11-r2
libvncserver
Fixed versions: 0.9.11-r2
libvncserver
Fixed versions: 0.9.11-r2
Complete source record
{
"id": "246f8ae21937074567aaee31a7ce1cc8170ab18d7453c45877d84397f59ef226",
"url": "https://osv.dev/vulnerability/ALPINE-CVE-2018-7225",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "ALPINE-CVE-2018-7225",
"summary": "An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.",
"evidence": "osv:ALPINE-CVE-2018-7225",
"products": [
{
"name": {
"value": "libvncserver",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.9.11-r2",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libvncserver",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.9.11-r2",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libvncserver",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.9.11-r1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libvncserver",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.9.11-r1",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libvncserver",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.9.11-r2",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libvncserver",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.9.11-r2",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libvncserver",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.9.11-r2",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
}
],
"severity": "critical",
"structured": {
"id": "ALPINE-CVE-2018-7225",
"aliases": [
"ALPINE-CVE-2018-7225"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.9.11-r2"
}
]
}
],
"package": {
"name": "libvncserver",
"purl": "pkg:apk/alpine/libvncserver?arch=source",
"ecosystem": "Alpine:v3.10"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-7225.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.9.11-r2"
}
]
}
],
"package": {
"name": "libvncserver",
"purl": "pkg:apk/alpine/libvncserver?arch=source",
"ecosystem": "Alpine:v3.11"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-7225.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.9.11-r1"
}
]
}
],
"package": {
"name": "libvncserver",
"purl": "pkg:apk/alpine/libvncserver?arch=source",
"ecosystem": "Alpine:v3.5"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-7225.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.9.11-r1"
}
]
}
],
"package": {
"name": "libvncserver",
"purl": "pkg:apk/alpine/libvncserver?arch=source",
"ecosystem": "Alpine:v3.6"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-7225.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.9.11-r2"
}
]
}
],
"package": {
"name": "libvncserver",
"purl": "pkg:apk/alpine/libvncserver?arch=source",
"ecosystem": "Alpine:v3.7"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-7225.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.9.11-r2"
}
]
}
],
"package": {
"name": "libvncserver",
"purl": "pkg:apk/alpine/libvncserver?arch=source",
"ecosystem": "Alpine:v3.8"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-7225.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.9.11-r2"
}
]
}
],
"package": {
"name": "libvncserver",
"purl": "pkg:apk/alpine/libvncserver?arch=source",
"ecosystem": "Alpine:v3.9"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-7225.json"
},
"ecosystem_specific": {}
}
],
"modified": "2026-10-23T17:24:50.006724478Z",
"provider": "osv",
"upstream": [
"CVE-2018-7225"
],
"references": [
"https://security.alpinelinux.org/vuln/CVE-2018-7225"
]
},
"related_cves": [
{
"value": "CVE-2018-7225",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 416159,
"published_at": "2018-02-19T15:29:00.253+00:00"
}