Threats Tagged 'cve-2026-18358'

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fix(es): * gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service (CVE-2026-18358) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A vulnerability in gnome-remote-desktop as shipped in Red Hat Enterprise Linux 10 allows unauthenticated remote attackers to bypass connection throttling when the daemon runs in system mode with RDP enabled. This can lead to resource exhaustion by opening many parallel pre-authentication connections, causing denial of service and preventing legitimate RDP sessions. The issue requires a non-default configuration and does not affect the default user-session mode or upstream versions. A security update is available from Red Hat to address this issue.

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations until timeout, exhausting resources and preventing legitimate users from establishing RDP sessions. This issue does not affect the upstream version.