A flaw in gnome-remote-desktop on Red Hat Enterprise Linux occurs when the daemon runs in system mode with RDP enabled. The incoming connection handler bypasses the connection throttler, enabling unauthenticated remote attackers to open numerous parallel pre-authentication connections to the RDP listener. This leads to accumulation of accepted sockets and pending routing-token operations until timeout, exhausting resources and causing denial of service by preventing legitimate users from establishing RDP sessions. The issue is specific to Red Hat's packaging and configuration; the upstream version is not affected. Exploitation requires system-mode RDP to be explicitly enabled and accessible from untrusted networks, limiting the attack surface. Red Hat has released a security update to fix this vulnerability.

The vulnerability allows unauthenticated remote attackers to cause a denial of service by exhausting system resources through uncontrolled parallel pre-authentication RDP connections. This prevents legitimate users from establishing RDP sessions. There is no impact on confidentiality or integrity. The severity is rated high due to the availability impact, but practical exploitation is limited by the need for a non-default configuration.

Red Hat has released an official security update that fixes this vulnerability. Users should apply the update to affected Red Hat Enterprise Linux 10 systems. If system-mode RDP is not required, it should be disabled. If it must remain enabled, restrict access to the RDP listener (default port 3389) to trusted hosts or management networks using host-based firewall rules. These mitigations reduce the attack surface and prevent exploitation.