Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-5024: A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being able to open files even after it is restarted via systemd.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | gnome-remote-desktop | 0:47.3-1.amzn2023.0.1 |
| Amazon Linux · 2023 | gnome-remote-desktop-debuginfo | 0:47.3-1.amzn2023.0.1 |
| Amazon Linux · 2023 | gnome-remote-desktop-debugsource | 0:47.3-1.amzn2023.0.1 |
Vulnerabilities 1
-
High 7.4
Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-5024.html