Skip to content
OpenAdvisories
Medium · 5.9 CVE-2026-109833 EUVD-2026-98479GHSA-ww8j-g775-7xjg

Gnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vnc tls peek buffer handling allows remote denial of service

Published Oct 13, 2026 · Updated Nov 5, 2026 · Assigned by redhat

Description

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied buffer instead of compacting the peek buffer. A remote attacker who can reach an enabled VNC TLS listener and trigger a peek/read size mismatch can cause an out-of-bounds write, leading to denial of service.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Enterprise Linux 10 — —
Red Hat Red Hat Enterprise Linux 8 — —
Red Hat Red Hat Enterprise Linux 9 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 gnome-remote-desktop No fix yet —
Ubuntu 26.04 LTS gnome-remote-desktop No fix yet —
Ubuntu 24.04 LTS gnome-remote-desktop No fix yet —
Ubuntu 22.04 LTS gnome-remote-desktop No fix yet —
Ubuntu 20.04 LTS gnome-remote-desktop No fix yet —

References