Skip to main content
CVE-2025-5024VulnerabilityPublished Updated

Red Hat Security Advisory: gnome-remote-desktop security update

Affects Red Hat gnome-remote-desktopSource GCVE Database

0
Compare

Not known to be exploited.

Data as of 1 Nov 2026, 12:28 UTC

Severity
Medium

Rated by Threat Radar · No CVSS score from NVD or the CNA

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 21 Jul 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 1 Nov 2026.

What to do

AI-suggested

Red Hat has released an official security update for gnome-remote-desktop (version 40.0-10.el9_0) that addresses this vulnerability. Users should apply this update promptly to remediate the issue. For detailed update instructions, refer to Red Hat's advisory and article at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.

Description

A security vulnerability (CVE-2025-5024) in GNOME Remote Desktop allows uncontrolled resource consumption due to malformed RDP PDUs. This issue affects the gnome-remote-desktop component in Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. The vulnerability has been rated with moderate impact by Red Hat Product Security. An update is available to address this issue.

References

Community reviews

Loading reviews…