Skip to main content
CVE-2025-5024VulnerabilityPublished Updated

Red Hat Security Advisory: gnome-remote-desktop security update

Affects Red Hat gnome-remote-desktopSource GCVE Database

0
Compare

Not known to be exploited : upgrade the Red Hat redhat/gnome-remote-desktop package to 0.1.8-4.el8_4 when convenient.

Data as of 1 Nov 2026, 12:28 UTC

Severity
Medium

Rated by Threat Radar · No CVSS score from NVD or the CNA

Patch
Available – fixed in 0.1.8-4.el8_4

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 21 Jul 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 1 Nov 2026.

What to do

Upgrade the Red Hat redhat/gnome-remote-desktop package to 0.1.8-4.el8_4.

Affected software

ProductAffectedFixed in
Red Hatredhat/gnome-remote-desktoppkg:rpm/redhat/gnome-remote-desktopOther threatsAffected
  • <0.1.8-4.el8_4
Fixed in
  • 0.1.8-4.el8_4

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Red Hat has released updated gnome-remote-desktop packages for Red Hat Enterprise Linux 8.4 to address this vulnerability. Users should apply the security update as described in Red Hat advisory RHSA-2025:11407. Refer to Red Hat's official guidance at https://access.redhat.com/articles/11258 for update instructions. No additional mitigation steps are indicated by the vendor.

Description

A vulnerability in GNOME Remote Desktop allows uncontrolled resource consumption triggered by malformed RDP protocol data units (PDUs). This issue affects Red Hat Enterprise Linux 8.4 versions of the gnome-remote-desktop package. The vulnerability has been rated as moderate severity by Red Hat Product Security. An update addressing this issue is available for affected Red Hat Enterprise Linux 8.4 systems.

References

Community reviews

Loading reviews…