https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 21:16:18 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:54512 <p><strong>Affected:</strong> AlmaLinux:10: gnome-remote-desktop</p> <p>GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.</p> <p>Security Fix(es):</p> <p>* gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service (CVE-2026-18358)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: gnome-remote-desktop</p> <p>GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.</p> <p>Security Fix(es):</p> <p>* gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service (CVE-2026-18358)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:54512 https://cve.radiocsirt.org/vuln/euvd-2026-351876 EUVD-2026-351876 https://cve.radiocsirt.org/vuln/euvd-2026-351876 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18358 <p>A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations until timeout, exhausting resources and preventing legitimate users from establishing RDP sessions. This issue does not affect the upstream version.</p> <p>A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations until timeout, exhausting resources and preventing legitimate users from establishing RDP sessions. This issue does not affect the upstream version.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-18358 https://cve.radiocsirt.org/vuln/ghsa-5hp4-5mvq-qw3w <p>A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations until timeout, exhausting resources and preventing legitimate users from establishing RDP sessions. This issue does not affect the upstream version.</p> <p>A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations until timeout, exhausting resources and preventing legitimate users from establishing RDP sessions. This issue does not affect the upstream version.</p> https://cve.radiocsirt.org/vuln/ghsa-5hp4-5mvq-qw3w https://cve.radiocsirt.org/vuln/opensuse-su-2026:21888-1 <p>Security update for gnome-remote-desktop</p> <p>Security update for gnome-remote-desktop</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:21888-1 https://cve.radiocsirt.org/vuln/rlsa-2026:54512 <p><strong>Affected:</strong> Rocky Linux:10: gnome-remote-desktop</p> <p>GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.</p> <p>Security Fix(es):</p> <p>* gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service (CVE-2026-18358)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: gnome-remote-desktop</p> <p>GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.</p> <p>Security Fix(es):</p> <p>* gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service (CVE-2026-18358)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:54512 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18358 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: gnome-remote-desktop, Ubuntu:22.04:LTS: gnome-remote-desktop, Ubuntu:24.04:LTS: gnome-remote-desktop, Ubuntu:26.04:LTS: gnome-remote-desktop</p> <p>A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations until timeout, exhausting resources and preventing legitimate users from establishing RDP sessions. This issue does not affect the upstream version.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: gnome-remote-desktop, Ubuntu:22.04:LTS: gnome-remote-desktop, Ubuntu:24.04:LTS: gnome-remote-desktop, Ubuntu:26.04:LTS: gnome-remote-desktop</p> <p>A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations until timeout, exhausting resources and preventing legitimate users from establishing RDP sessions. This issue does not affect the upstream version.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18358 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2829 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (gnome-remote-desktop) ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (gnome-remote-desktop) ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2829