Gnome remote desktop: Uncontrolled Resource Consumption in Red Hat Red Hat Enterprise Linux 10 (CVE-2025-5024)
GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fix(es): * gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
CVE-2025-5024 is an uncontrolled resource consumption vulnerability in gnome-remote-desktop caused by malformed RDP PDUs. This can lead to excessive resource usage, potentially degrading service availability. Red Hat Product Security rated this issue as moderate severity and released updated gnome-remote-desktop packages for Red Hat Enterprise Linux 8.6 variants including Extended Update Support, Advanced Mission Critical Update Support, Update Services for SAP Solutions, and Telecommunications Update Service. The advisory references Red Hat Bugzilla 2367717 and provides package updates to remediate the issue.
Potential Impact
The vulnerability allows an attacker to cause uncontrolled resource consumption in the gnome-remote-desktop service by sending malformed RDP PDUs. This could degrade or disrupt the remote desktop service availability on affected systems. There is no indication of known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated gnome-remote-desktop packages for Red Hat Enterprise Linux 8.6 variants that fix this vulnerability. Users should apply these official updates as described in Red Hat advisory RHSA-2025:11405 and the referenced article https://access.redhat.com/articles/11258. Patch status is confirmed with official fixes available. No additional mitigation steps are indicated by the vendor.
Gnome remote desktop: Uncontrolled Resource Consumption in Red Hat Red Hat Enterprise Linux 10 (CVE-2025-5024)
Description
GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fix(es): * gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS v3.1
Score 7.4high
Affected software
pkg:rpm/redhat/gnome-remote-desktopRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-5024 is an uncontrolled resource consumption vulnerability in gnome-remote-desktop caused by malformed RDP PDUs. This can lead to excessive resource usage, potentially degrading service availability. Red Hat Product Security rated this issue as moderate severity and released updated gnome-remote-desktop packages for Red Hat Enterprise Linux 8.6 variants including Extended Update Support, Advanced Mission Critical Update Support, Update Services for SAP Solutions, and Telecommunications Update Service. The advisory references Red Hat Bugzilla 2367717 and provides package updates to remediate the issue.
Potential Impact
The vulnerability allows an attacker to cause uncontrolled resource consumption in the gnome-remote-desktop service by sending malformed RDP PDUs. This could degrade or disrupt the remote desktop service availability on affected systems. There is no indication of known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated gnome-remote-desktop packages for Red Hat Enterprise Linux 8.6 variants that fix this vulnerability. Users should apply these official updates as described in Red Hat advisory RHSA-2025:11405 and the referenced article https://access.redhat.com/articles/11258. Patch status is confirmed with official fixes available. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:11405
- Cve Count
- 1
Threat ID: 6a419cb927e9c79719abe362
Added to database: 06/28/2026, 22:14:17 UTC
Last enriched: 06/28/2026, 22:34:15 UTC
Last updated: 09/10/2026, 19:36:51 UTC
Views: 69
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.