CVE-2026-109833

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied buffer instead of compacting the peek buffer. A remote attacker who can reac...

CVE-2026-109832

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results GNUTLSEAGAIN and GNUTLSEINTERRUPTED are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC...

CVE-2026-109833 Gnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vnc tls peek buffer handling allows remote denial of service

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied buffer instead of compacting the peek buffer. A remote attacker who can reac...

CVE-2026-109833

A heap buffer overflow exists in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. The vulnerability resides in the VNC TLS read path , where partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into a caller-supplied buffer rather than compacting th...

CVE-2026-109833

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied buffer instead of compacting the peek buffer. A remote attacker who can reac...

CVE-2026-109833

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied buffer instead of compacting the peek buffer. A remote attacker who can reac...

CVE-2026-109832 Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results GNUTLSEAGAIN and GNUTLSEINTERRUPTED are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC...

CVE-2026-109832

A flaw exists in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers , retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED ) are processed using an unbounded busy loop rather than yielding to the event loop. A remote attacker capable of reaching ...

CVE-2026-109832 Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results GNUTLSEAGAIN and GNUTLSEINTERRUPTED are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC...

CVE-2026-109832

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results GNUTLSEAGAIN and GNUTLSEINTERRUPTED are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC...

Rocky Linux 10.2 [CIQ] Security Update: gnome-remote-desktop / gnome-remote-desktop-debuginfo / etc (crlsa-2026_54512)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202654512 advisory. gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service CVE-2026-18358 Tenable...

Rocky Linux 8 [CIQ] Security Update: gnome-remote-desktop / gnome-remote-desktop-debuginfo / etc (crlsa-2025_10742)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202510742 advisory. gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs CVE-2025-5024 Tenable has extracted the preceding description block directly from...

Rocky Linux 10.0 [CIQ] Security Update: gnome-remote-desktop / gnome-remote-desktop-debuginfo / etc (crlsa-2025_10635)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202510635 advisory. gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs CVE-2025-5024 Tenable has extracted the preceding description block directly...

Rocky Linux 10.0 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc (crlsa-2025_9307)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259307 advisory. gnome-remote-desktop: freerdp: Unauthenticated RDP Packet Causes Segfault in FreeRDP Leading to Denial of Service CVE-2025-4478 Tenable has extracted the precedi...

Rocky Linux 9 [CIQ] Security Update: gnome-remote-desktop / gnome-remote-desktop-debuginfo / etc (crlsa-2025_10631)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202510631 advisory. gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs CVE-2025-5024 Tenable has extracted the preceding description block directly from...

[SECURITY] Fedora 45 Update: gnome-remote-desktop-51.0-1.fc45

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment...

AlmaLinux 9.2 [TuxCare] Security Update: gnome-remote-desktop (ALMALINUX9.2:CLSA-2025:1765286622)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765286622 advisory. - A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust...

openSUSE 16 Security Update : gnome-remote-desktop (openSUSE-SU-2026:21888-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21888-1 advisory. This update for gnome-remote-desktop fixes the following issue: - CVE-2026-18358: system-mode RDP server missing connection throttling can allow...

SUSE CVE-2026-96541

A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote attacker can open RDP connections without completing the handshake and retain the connection-throttling slots indefinitely because no pre-authentication handshake deadline is enforced. By exhausting the global...

Security update for gnome-remote-desktop (important)

openSUSE security update: security update for gnome-remote-desktop ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21888-1 Rating: important References: bsc1273354 Cross-References: CVE-2026-18358 CVSS scores: CVE-2026-18358 SUSE : 7.5...