Denial of Service Vulnerability in Gnome Remote Desktop by Red Hat
CVE-2025-5024

7.4HIGH

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Vendor
CVE Published:
22 May 2025

What is CVE-2025-5024?

A vulnerability exists in Gnome Remote Desktop that enables unauthenticated attackers to exploit the service when it is configured to listen for RDP connections. This can lead to resource exhaustion, causing the service to crash repeatedly. Furthermore, there is a risk of resource leakage, which may prevent Gnome Remote Desktop from opening files, persisting even after the service is restarted via systemd, thus impacting overall system performance and usability.

References

https://access.redhat.com/security/cve/CVE-2025-5024
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2367717
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-5024 : Denial of Service Vulnerability in Gnome Remote Desktop by Red Hat