{"id":"DEBIAN-CVE-2025-5024","details":"A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being able to open files even after it is restarted via systemd.","modified":"2026-09-24T12:00:05.940764639Z","published":"2025-05-22T15:16:05.810Z","upstream":["CVE-2025-5024"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2025-5024"}],"affected":[{"package":{"name":"gnome-remote-desktop","ecosystem":"Debian:12","purl":"pkg:deb/debian/gnome-remote-desktop?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["43.3-1","43.4-1","43.4-2","44.0-1","44.1-1","44.2-1","44.2-2","44.2-3","44.2-4","44.2-5","44.2-6","44.2-7","44.2-8","44~rc-1","45.0-1","45.1-1","45.1-2","45.1-3","45~beta-1","45~rc-1","46.0-1","46.0-2","46.1-1","46.1-2","46.1-3","46.2-1","46.3-1","46.3-2","46.3-3","46.3-4","46.4-1","47.0-1","47.0-3","47.2-1","47.3-1","47~beta-1","47~rc-1","48.0-1","48.1-1","48.1-2","48.1-3","48.1-4","48.2-1","48~alpha-1","48~alpha-2","49.0-1","49.1-1","49.1-2","49.2-1","49.2-2","49.2-3","49.2-4","50.1-1","50.1-2","50.1-3","50.1-5","50.2-1","50~beta-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-5024.json"}},{"package":{"name":"gnome-remote-desktop","ecosystem":"Debian:13","purl":"pkg:deb/debian/gnome-remote-desktop?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["48.1-4","48.2-1","49.0-1","49.1-1","49.1-2","49.2-1","49.2-2","49.2-3","49.2-4","50.1-1","50.1-2","50.1-3","50.1-5","50.2-1","50~beta-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-5024.json"}},{"package":{"name":"gnome-remote-desktop","ecosystem":"Debian:14","purl":"pkg:deb/debian/gnome-remote-desktop?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"50.1-4"}]}],"versions":["48.1-4","48.2-1","49.0-1","49.1-1","49.1-2","49.2-1","49.2-2","49.2-3","49.2-4","50.1-1","50.1-2","50.1-3","50~beta-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-5024.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H"}]}