Ubuntu.comUB:CVE-2024-5148

HistoryMay 22, 2024 - 12:00 a.m.

CVE-2024-5148

2024-05-2200:00:00

ubuntu.com

gnome-remote-desktop vulnerability

handover objects

validation failure

issues 196 1222159

7.3 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

gnome-remote-desktop fails to validate up front that the caller of methods
on handover objects matches the user associated with the session involved
with the handover process.

Bugs

Notes

Author	Note
mdeslaur	46.x series only

OSVersionArchitecturePackageVersionFilename
ubuntu24.04noarchgnome-remote-desktop< 46.2-1~ubuntu24.04.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	24.04	noarch	gnome-remote-desktop	< 46.2-1~ubuntu24.04.2	UNKNOWN

References

gitlab.gnome.org/GNOME/gnome-remote-desktop/-/commit/2551f90af03828d06f55169a4e95876a5d58bb8e

launchpad.net/bugs/cve/CVE-2024-5148

nvd.nist.gov/vuln/detail/CVE-2024-5148

security-tracker.debian.org/tracker/CVE-2024-5148

ubuntu.com/security/notices/USN-6785-1

www.cve.org/CVERecord?id=CVE-2024-5148