vulnerability
Amazon Linux 2023: CVE-2025-5024: Medium priority package update for gnome-remote-desktop
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:N/I:N/A:C) | May 21, 2025 | Sep 9, 2025 | Sep 9, 2025 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:C)
Published
May 21, 2025
Added
Sep 9, 2025
Modified
Sep 9, 2025
Description
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being able to open files even after it is restarted via systemd.
Solutions
amazon-linux-2023-upgrade-gnome-remote-desktopamazon-linux-2023-upgrade-gnome-remote-desktop-debuginfoamazon-linux-2023-upgrade-gnome-remote-desktop-debugsource
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.