CriticalFix available
libvncserver, tightvnc and 1 more products — security advisory
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
- Products
- libvncserver, tightvnc, vino
- Affected versions
- Not specified
- Fixed versions
- 0.9.11+dfsg-1.1, 1:1.3.9-9.1, 3.22.0-6
- CVEs
- CVE-2018-7225
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 00:31 UTC · Revision 1
Source evidence
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
osv:DEBIAN-CVE-2018-7225
libvncserver
Fixed versions: 0.9.11+dfsg-1.1
libvncserver
Fixed versions: 0.9.11+dfsg-1.1
libvncserver
Fixed versions: 0.9.11+dfsg-1.1
tightvnc
Fixed versions: 1:1.3.9-9.1
tightvnc
Fixed versions: 1:1.3.9-9.1
tightvnc
Fixed versions: 1:1.3.9-9.1
vino
Fixed versions: 3.22.0-6
Complete source record
{
"id": "c0e951cacd94e7161967a3f6d12c62503fec5b4924ed04e12b9ab4349159b25a",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2018-7225",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2018-7225",
"summary": "An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.",
"evidence": "osv:DEBIAN-CVE-2018-7225",
"products": [
{
"name": {
"value": "libvncserver",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.9.11+dfsg-1.1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libvncserver",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.9.11+dfsg-1.1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libvncserver",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.9.11+dfsg-1.1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tightvnc",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:1.3.9-9.1",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tightvnc",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:1.3.9-9.1",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tightvnc",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:1.3.9-9.1",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "vino",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.22.0-6",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
}
],
"severity": "critical",
"structured": {
"id": "DEBIAN-CVE-2018-7225",
"aliases": [
"DEBIAN-CVE-2018-7225"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.9.11+dfsg-1.1"
}
]
}
],
"package": {
"name": "libvncserver",
"purl": "pkg:deb/debian/libvncserver?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2018-7225.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.9.11+dfsg-1.1"
}
]
}
],
"package": {
"name": "libvncserver",
"purl": "pkg:deb/debian/libvncserver?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2018-7225.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.9.11+dfsg-1.1"
}
]
}
],
"package": {
"name": "libvncserver",
"purl": "pkg:deb/debian/libvncserver?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2018-7225.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.3.9-9.1"
}
]
}
],
"package": {
"name": "tightvnc",
"purl": "pkg:deb/debian/tightvnc?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2018-7225.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.3.9-9.1"
}
]
}
],
"package": {
"name": "tightvnc",
"purl": "pkg:deb/debian/tightvnc?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2018-7225.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.3.9-9.1"
}
]
}
],
"package": {
"name": "tightvnc",
"purl": "pkg:deb/debian/tightvnc?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2018-7225.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.22.0-6"
}
]
}
],
"package": {
"name": "vino",
"purl": "pkg:deb/debian/vino?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2018-7225.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-23T18:03:23.992481418Z",
"provider": "osv",
"upstream": [
"CVE-2018-7225"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2018-7225"
]
},
"related_cves": [
{
"value": "CVE-2018-7225",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 421378,
"published_at": "2018-02-19T15:29:00.253+00:00"
}