{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/gnome-remote-desktop/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:gnome:gnome-remote-desktop:*:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-109832"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Red Hat Enterprise Linux","gnome-remote-desktop"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Red Hat","GNOME"],"content_html":"\u003cp\u003eA vulnerability (CVE-2026-109832) exists in the gnome-remote-desktop package as shipped in Red Hat Enterprise Linux (RHEL). The flaw stems from improper handling of specific GnuTLS return codes (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) within the VNC TLS I/O handlers. Instead of yielding control back to the event loop, the application enters an unbounded busy loop. A remote attacker capable of connecting to an enabled VNC TLS listener can trigger this condition, causing the event-loop thread to pin at 100% CPU usage. This prevents the application from making forward progress, effectively resulting in a denial-of-service condition for the remote desktop session.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability results in a denial-of-service, preventing legitimate users from accessing or maintaining remote desktop sessions via the affected gnome-remote-desktop service. Targeted systems running RHEL with remote VNC access enabled are at risk of resource exhaustion on the event-loop thread, potentially impacting system stability depending on the configuration and threading model of the service.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritized actions for security and IT teams include:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eMonitor system logs for repeated or unexplained high CPU usage originating from the gnome-remote-desktop process.\u003c/li\u003e\n\u003cli\u003eIdentify all RHEL systems with gnome-remote-desktop enabled and VNC listeners exposed to the network.\u003c/li\u003e\n\u003cli\u003ePatch CVE-2026-109832 by applying the security updates provided by Red Hat once available.\u003c/li\u003e\n\u003cli\u003eRestrict access to VNC TLS listeners to trusted network segments to mitigate the risk of remote triggering by unauthorized actors.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-13T12:35:21Z","date_published":"2026-10-13T12:35:21Z","id":"https://feed.craftedsignal.io/briefs/2026-10-gnome-remote-desktop-dos/","summary":"A vulnerability in gnome-remote-desktop on Red Hat Enterprise Linux allows a remote attacker to trigger an infinite loop in VNC TLS I/O handlers, leading to high CPU consumption and service denial.","title":"Denial of Service in gnome-remote-desktop via VNC TLS I/O Loop","url":"https://feed.craftedsignal.io/briefs/2026-10-gnome-remote-desktop-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - Gnome-Remote-Desktop","version":"https://jsonfeed.org/version/1.1"}