CVE-2025-5024
Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being able to open files even after it is restarted via systemd.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.4
Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being able to open files even after it is restarted via systemd.
- Record
CVE-2025-5024- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2025-16145
7.4
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being able to open files even after it is restarted via systemd.
- Record
EUVD-2025-16145- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-hf3p-gpvx-q597
7.4
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections,...
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being able to open files even after it is restarted via systemd.
- Record
GHSA-hf3p-gpvx-q597- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
7.4
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being able to open files even after it is restarted via systemd.
- Record
CVE-2025-5024- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-5024
7.4
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being able to open files even after it is restarted via systemd.
- Record
DEBIAN-CVE-2025-5024- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10631
7.4
Red Hat Security Advisory: gnome-remote-desktop security update
- Record
RHSA-2025:10631- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
Show 23 moreShow less
OSVRHSA-2025:10635
7.4
Red Hat Security Advisory: gnome-remote-desktop security update
- Record
RHSA-2025:10635- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10742
7.4
Red Hat Security Advisory: gnome-remote-desktop security update
- Record
RHSA-2025:10742- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:11403
7.4
Red Hat Security Advisory: gnome-remote-desktop security update
- Record
RHSA-2025:11403- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:11404
7.4
Red Hat Security Advisory: gnome-remote-desktop security update
- Record
RHSA-2025:11404- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:11405
7.4
Red Hat Security Advisory: gnome-remote-desktop security update
- Record
RHSA-2025:11405- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:11406
7.4
Red Hat Security Advisory: gnome-remote-desktop security update
- Record
RHSA-2025:11406- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:11407
7.4
Red Hat Security Advisory: gnome-remote-desktop security update
- Record
RHSA-2025:11407- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:11408
7.4
Red Hat Security Advisory: gnome-remote-desktop security update
- Record
RHSA-2025:11408- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:11418
7.4
Red Hat Security Advisory: gnome-remote-desktop security update
- Record
RHSA-2025:11418- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2025:10631
7.4
Moderate: gnome-remote-desktop security update
GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.
Security Fix(es):
- gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:10631- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2025:10635
7.4
Moderate: gnome-remote-desktop security update
GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.
Security Fix(es):
- gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:10635- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2025:10742
7.4
Moderate: gnome-remote-desktop security update
GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.
Security Fix(es):
- gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:10742- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-5024
7.4
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being able to open files even after it is restarted via systemd.
- Record
UBUNTU-CVE-2025-5024- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2025:10631 No score
Moderate: gnome-remote-desktop security update
GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.
Security Fix(es):
- gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:10631- Updated
- 2026-11-02
OSVALSA-2025:10635 No score
Moderate: gnome-remote-desktop security update
GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.
Security Fix(es):
- gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:10635- Updated
- 2026-11-02
OSVALSA-2025:10742 No score
Moderate: gnome-remote-desktop security update
GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.
Security Fix(es):
- gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:10742- Updated
- 2026-11-02
OSVCLSA-2025-1765286622 No score
gnome-remote-desktop: Fix of CVE-2025-5024
- CVE-2025-5024: add connection throttling to prevent resource exhaustion. Fixes unauthenticated resource exhaustion and DoS attacks via connection flooding
- Record
CLSA-2025-1765286622- Updated
- 2026-11-02
OSV No score
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being able to open files even after it is restarted via systemd.
- Record
CVE-2025-5024- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10186-1 No score
gnome-remote-desktop-49.2-2.1 on GA media
These are all security issues fixed in the gnome-remote-desktop-49.2-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10186-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20590-1 No score
Security update for gnome-remote-desktop
This update for gnome-remote-desktop fixes the following issues:
Update to version 48.3.
Security issues fixed:
- CVE-2025-5024: an unauthenticated attacker can exhaust system resources (bsc#1244053).
Other updates and bugfixes:
-
Version update to 48.3:
- Fix image corruption on some NVIDIA GPUs.
-
Version upadte to 48.2:
- Handle Vulkan dma-buf format compatibility issues.
- Record
openSUSE-SU-2026:20590-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0766-1 No score
Security update for gnome-remote-desktop
This update for gnome-remote-desktop fixes the following issue:
- CVE-2025-5024: an unauthenticated attacker can exhaust system resources (bsc#1244053).
- Record
SUSE-SU-2026:0766-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:1646-1 No score
Security update for gnome-remote-desktop
This update for gnome-remote-desktop fixes the following issue:
- CVE-2025-5024: an unauthenticated attacker can exhaust system resources (bsc#1244053).
- Record
SUSE-SU-2026:1646-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:21362-1 No score
Security update for gnome-remote-desktop
This update for gnome-remote-desktop fixes the following issues:
Update to version 48.3.
Security issues fixed:
- CVE-2025-5024: an unauthenticated attacker can exhaust system resources (bsc#1244053).
Other updates and bugfixes:
-
Version update to 48.3:
- Fix image corruption on some NVIDIA GPUs.
-
Version upadte to 48.2:
- Handle Vulkan dma-buf format compatibility issues.
- Record
SUSE-SU-2026:21362-1- Updated
- 2026-11-02
Affected products
- red hat enterprise linux 10
- red hat enterprise linux 8
- red hat enterprise linux 8.2 advanced update support
- red hat enterprise linux 8.4 advanced mission critical update support
- red hat enterprise linux 8.4 extended update support long-life add-on
- red hat enterprise linux 8.6 advanced mission critical update support
- red hat enterprise linux 8.6 telecommunications update service
- red hat enterprise linux 8.6 update services for sap solutions
- red hat enterprise linux 8.8 telecommunications update service
- red hat enterprise linux 8.8 update services for sap solutions
- red hat enterprise linux 9
- red hat enterprise linux 9.0 update services for sap solutions
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnome-remote-desktopAlmaLinux:9 |
before 40.0-11.el9_6 | 40.0-11.el9_6 |
gnome-remote-desktopAlmaLinux:10 |
before 47.3-2.el10_0 | 47.3-2.el10_0 |
gnome-remote-desktopAlmaLinux:8 |
before 0.1.8-4.el8_10 | 0.1.8-4.el8_10 |
gnome-remote-desktopTuxCare:AlmaLinux:9.2 |
before 40.0-7.el9.tuxcare.els1 | 40.0-7.el9.tuxcare.els1 |
gnome-remote-desktopDebian:12 |
All versions, plus listed versions 43.3-143.4-143.4-244.0-144.1-1 Show 45 moreShow less44.2-144.2-244.2-344.2-444.2-544.2-644.2-744.2-844~rc-145.0-145.1-145.1-245.1-345~beta-145~rc-146.0-146.0-246.1-146.1-246.1-346.2-146.3-146.3-246.3-346.3-446.4-147.0-147.0-347.2-147.3-147~beta-147~rc-148.0-148.1-148.1-248.1-348.1-448.2-148~alpha-148~alpha-249.0-149.1-149.1-249.2-149.2-2 |
None known |
gnome-remote-desktopDebian:13 |
All versions, plus listed versions 48.1-448.2-149.0-149.1-149.1-2 Show 10 moreShow less49.2-149.2-249.2-349.2-450.1-150.1-250.1-350.1-550.2-150~beta-1 |
None known |
gnome-remote-desktopDebian:14 |
before 50.1-4, plus listed versions 48.1-448.2-149.0-149.1-149.1-2 Show 8 moreShow less49.2-149.2-249.2-349.2-450.1-150.1-250.1-350~beta-1 |
50.1-4 |
gnome-remote-desktopRed Hat:enterprise_linux:9::appstream |
before 0:40.0-11.el9_6 | 0:40.0-11.el9_6 |
gnome-remote-desktop-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:40.0-11.el9_6 | 0:40.0-11.el9_6 |
gnome-remote-desktop-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:40.0-11.el9_6 | 0:40.0-11.el9_6 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gnome-remote-desktopRed Hat:enterprise_linux:10.0 |
before 0:47.3-2.el10_0 | 0:47.3-2.el10_0 |
gnome-remote-desktop-debuginfoRed Hat:enterprise_linux:10.0 |
before 0:47.3-2.el10_0 | 0:47.3-2.el10_0 |
gnome-remote-desktop-debugsourceRed Hat:enterprise_linux:10.0 |
before 0:47.3-2.el10_0 | 0:47.3-2.el10_0 |
gnome-remote-desktopRed Hat:enterprise_linux:8::appstream |
before 0:0.1.8-4.el8_10 | 0:0.1.8-4.el8_10 |
gnome-remote-desktop-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:0.1.8-4.el8_10 | 0:0.1.8-4.el8_10 |
gnome-remote-desktop-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:0.1.8-4.el8_10 | 0:0.1.8-4.el8_10 |
gnome-remote-desktopRed Hat:rhel_e4s:9.2::appstream |
before 0:40.0-10.el9_2 | 0:40.0-10.el9_2 |
gnome-remote-desktop-debuginfoRed Hat:rhel_e4s:9.2::appstream |
before 0:40.0-10.el9_2 | 0:40.0-10.el9_2 |
gnome-remote-desktop-debugsourceRed Hat:rhel_e4s:9.2::appstream |
before 0:40.0-10.el9_2 | 0:40.0-10.el9_2 |
gnome-remote-desktopRed Hat:rhel_e4s:9.0::appstream |
before 0:40.0-10.el9_0 | 0:40.0-10.el9_0 |
gnome-remote-desktop-debuginfoRed Hat:rhel_e4s:9.0::appstream |
before 0:40.0-10.el9_0 | 0:40.0-10.el9_0 |
gnome-remote-desktop-debugsourceRed Hat:rhel_e4s:9.0::appstream |
before 0:40.0-10.el9_0 | 0:40.0-10.el9_0 |
gnome-remote-desktopRed Hat:rhel_aus:8.6::appstream |
before 0:0.1.8-4.el8_6 | 0:0.1.8-4.el8_6 |
gnome-remote-desktop-debuginfoRed Hat:rhel_aus:8.6::appstream |
before 0:0.1.8-4.el8_6 | 0:0.1.8-4.el8_6 |
gnome-remote-desktop-debugsourceRed Hat:rhel_aus:8.6::appstream |
before 0:0.1.8-4.el8_6 | 0:0.1.8-4.el8_6 |
gnome-remote-desktopRed Hat:rhel_e4s:8.6::appstream |
before 0:0.1.8-4.el8_6 | 0:0.1.8-4.el8_6 |
gnome-remote-desktop-debuginfoRed Hat:rhel_e4s:8.6::appstream |
before 0:0.1.8-4.el8_6 | 0:0.1.8-4.el8_6 |
gnome-remote-desktop-debugsourceRed Hat:rhel_e4s:8.6::appstream |
before 0:0.1.8-4.el8_6 | 0:0.1.8-4.el8_6 |
gnome-remote-desktopRed Hat:rhel_tus:8.6::appstream |
before 0:0.1.8-4.el8_6 | 0:0.1.8-4.el8_6 |
gnome-remote-desktop-debuginfoRed Hat:rhel_tus:8.6::appstream |
before 0:0.1.8-4.el8_6 | 0:0.1.8-4.el8_6 |
gnome-remote-desktop-debugsourceRed Hat:rhel_tus:8.6::appstream |
before 0:0.1.8-4.el8_6 | 0:0.1.8-4.el8_6 |
gnome-remote-desktopRed Hat:rhel_e4s:8.8::appstream |
before 0:0.1.8-4.el8_8 | 0:0.1.8-4.el8_8 |
gnome-remote-desktop-debuginfoRed Hat:rhel_e4s:8.8::appstream |
before 0:0.1.8-4.el8_8 | 0:0.1.8-4.el8_8 |
gnome-remote-desktop-debugsourceRed Hat:rhel_e4s:8.8::appstream |
before 0:0.1.8-4.el8_8 | 0:0.1.8-4.el8_8 |
gnome-remote-desktopRed Hat:rhel_tus:8.8::appstream |
before 0:0.1.8-4.el8_8 | 0:0.1.8-4.el8_8 |
gnome-remote-desktop-debuginfoRed Hat:rhel_tus:8.8::appstream |
before 0:0.1.8-4.el8_8 | 0:0.1.8-4.el8_8 |
gnome-remote-desktop-debugsourceRed Hat:rhel_tus:8.8::appstream |
before 0:0.1.8-4.el8_8 | 0:0.1.8-4.el8_8 |
gnome-remote-desktopRed Hat:rhel_aus:8.4::appstream |
before 0:0.1.8-4.el8_4 | 0:0.1.8-4.el8_4 |
gnome-remote-desktop-debuginfoRed Hat:rhel_aus:8.4::appstream |
before 0:0.1.8-4.el8_4 | 0:0.1.8-4.el8_4 |
gnome-remote-desktop-debugsourceRed Hat:rhel_aus:8.4::appstream |
before 0:0.1.8-4.el8_4 | 0:0.1.8-4.el8_4 |
gnome-remote-desktopRed Hat:rhel_eus_long_life:8.4::appstream |
before 0:0.1.8-4.el8_4 | 0:0.1.8-4.el8_4 |
gnome-remote-desktop-debuginfoRed Hat:rhel_eus_long_life:8.4::appstream |
before 0:0.1.8-4.el8_4 | 0:0.1.8-4.el8_4 |
gnome-remote-desktop-debugsourceRed Hat:rhel_eus_long_life:8.4::appstream |
before 0:0.1.8-4.el8_4 | 0:0.1.8-4.el8_4 |
gnome-remote-desktopRed Hat:rhel_eus:9.4::appstream |
before 0:40.0-11.el9_4 | 0:40.0-11.el9_4 |
gnome-remote-desktop-debuginfoRed Hat:rhel_eus:9.4::appstream |
before 0:40.0-11.el9_4 | 0:40.0-11.el9_4 |
gnome-remote-desktop-debugsourceRed Hat:rhel_eus:9.4::appstream |
before 0:40.0-11.el9_4 | 0:40.0-11.el9_4 |
gnome-remote-desktopRed Hat:rhel_aus:8.2::appstream |
before 0:0.1.6-9.el8_2.1 | 0:0.1.6-9.el8_2.1 |
gnome-remote-desktop-debuginfoRed Hat:rhel_aus:8.2::appstream |
before 0:0.1.6-9.el8_2.1 | 0:0.1.6-9.el8_2.1 |
gnome-remote-desktop-debugsourceRed Hat:rhel_aus:8.2::appstream |
before 0:0.1.6-9.el8_2.1 | 0:0.1.6-9.el8_2.1 |
gnome-remote-desktopRocky Linux:9 |
before 0:40.0-11.el9_6 | 0:40.0-11.el9_6 |
gnome-remote-desktopRocky Linux:10 |
before 0:47.3-2.el10_0 | 0:47.3-2.el10_0 |
gnome-remote-desktopRocky Linux:8 |
before 0:0.1.8-4.el8_10 | 0:0.1.8-4.el8_10 |
gnome-remote-desktopopenSUSE:Leap 15.6 |
before 45.1-150600.3.6.1 | 45.1-150600.3.6.1 |
gnome-remote-desktopUbuntu:20.04:LTS |
All versions, plus listed versions 0.1.7-1 |
None known |
gnome-remote-desktopUbuntu:22.04:LTS |
All versions, plus listed versions 40.2-141.0-141.1-341.2-142~beta-1 Show 11 moreShow less42~rc-142.0-142.0-242.0-4ubuntu142.1.1-0ubuntu142.2-0ubuntu142.3-0ubuntu142.4-0ubuntu142.7-0ubuntu142.9-0ubuntu0.22.04.142.9-0ubuntu0.22.04.2 |
None known |
gnome-remote-desktopUbuntu:24.04:LTS |
All versions, plus listed versions 45.0-145.1-145.1-1build146~rc-0ubuntu246.0-2 Show 5 moreShow less46.1-146.2-1~ubuntu24.04.246.3-0ubuntu146.3-0ubuntu1.146.3-0ubuntu1.2 |
None known |
gnome-remote-desktopUbuntu:25.10 |
All versions, plus listed versions 48.0-148.1-249~alpha-0ubuntu149~rc-0ubuntu149.0-0ubuntu149.0-0ubuntu1.1 |
None known |
gnome-remote-desktopUbuntu:26.10 |
All versions, plus listed versions 50.0-0ubuntu250.1-350.1-551~alpha-0ubuntu151~alpha-0ubuntu251.0-0ubuntu1 |
None known |
gnome-remote-desktopUbuntu:26.04:LTS |
All versions, plus listed versions 49.0-0ubuntu149.1-149.1-249.2-149.2-2 Show 6 moreShow less49.2-2ubuntu150~beta-150~rc-0ubuntu150.0-0ubuntu150.0-0ubuntu250.2-0ubuntu0.1 |
None known |
gnome-remote-desktopopenSUSE:Tumbleweed |
before 49.2-2.1 | 49.2-2.1 |
gnome-remote-desktopopenSUSE:Leap 16.0 |
before 48.3-160000.1.1 | 48.3-160000.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-5024 is a high vulnerability (CVSS 7.4) in Red Hat Enterprise Linux 10, published May 22, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.83%, the 57th percentile. Fixed in gnome-remote-desktop 40.0-11.el9_6.
References
access.redhat.com/errata/RHSA-2025:10631
access.redhat.com/errata/RHSA-2025:10635
access.redhat.com/errata/RHSA-2025:10742
access.redhat.com/errata/RHSA-2025:11403
access.redhat.com/errata/RHSA-2025:11404
access.redhat.com/errata/RHSA-2025:11405
Show 36 moreShow less
access.redhat.com/errata/RHSA-2025:11406
access.redhat.com/errata/RHSA-2025:11407
access.redhat.com/errata/RHSA-2025:11408
access.redhat.com/errata/RHSA-2025:11418
access.redhat.com/security/cve/CVE-2025-5024
bugzilla.redhat.com/show_bug.cgi?id=2367717
gitlab.gnome.org/GNOME/gnome-remote-desktop/-/merge_requests/321
nvd.nist.gov/vuln/detail/CVE-2025-5024
github.com/advisories/GHSA-hf3p-gpvx-q597
bugzilla.redhat.com/2367717
errata.almalinux.org/9/ALSA-2025-10631.html
errata.almalinux.org/10/ALSA-2025-10635.html
errata.almalinux.org/8/ALSA-2025-10742.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1765286622.html
security-tracker.debian.org/tracker/CVE-2025-5024
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10631.json
cve.org/CVERecord?id=CVE-2025-5024
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10635.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10742.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11403.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11404.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11405.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11406.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11407.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11408.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11418.json
errata.rockylinux.org/RLSA-2025:10631
errata.rockylinux.org/RLSA-2025:10635
errata.rockylinux.org/RLSA-2025:10742
suse.com/support/update/announcement/2026/suse-su-20260766-1
bugzilla.suse.com/1244053
suse.com/security/cve/CVE-2025-5024
suse.com/support/update/announcement/2026/suse-su-20261646-1
suse.com/support/update/announcement/2026/suse-su-202621362-1
ubuntu.com/security/CVE-2025-5024
Left out here: 8 versions. The JSON record has them.