Red Hat Security Advisory: gnome-remote-desktop security update
Affects Red Hat gnome-remote-desktopSource GCVE Database
Not known to be exploited : upgrade the Red Hat redhat/gnome-remote-desktop package to 0.1.8-4.el8_4 when convenient.
Data as of 1 Nov 2026, 12:28 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- Patch
- Available – fixed in 0.1.8-4.el8_4
Exploitation evidence
Disclosed: evidence found.
CVE published 21 Jul 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 1 Nov 2026.
What to do
Upgrade the Red Hat redhat/gnome-remote-desktop package to 0.1.8-4.el8_4.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Red Hatredhat/gnome-remote-desktoppkg:rpm/redhat/gnome-remote-desktopOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Red Hat has released updated gnome-remote-desktop packages for Red Hat Enterprise Linux 8.4 to address this vulnerability. Users should apply the security update as described in Red Hat advisory RHSA-2025:11407. Refer to Red Hat's official guidance at https://access.redhat.com/articles/11258 for update instructions. No additional mitigation steps are indicated by the vendor.
Description
A vulnerability in GNOME Remote Desktop allows uncontrolled resource consumption triggered by malformed RDP protocol data units (PDUs). This issue affects Red Hat Enterprise Linux 8.4 versions of the gnome-remote-desktop package. The vulnerability has been rated as moderate severity by Red Hat Product Security. An update addressing this issue is available for affected Red Hat Enterprise Linux 8.4 systems.