PT-2024-5049 · Gnome+3 · Gnome-Remote-Desktop+3

Robb Gatica · Published 2024-05-21 · Updated 2024-09-03 · CVE-2024-5148

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: gnome-remote-desktop (affected versions not specified)

Description: A flaw was found in the gnome-remote-desktop package, where the gnome-remote-desktop system daemon performs inadequate validation of session agents using D-Bus methods related to transitioning a client connection from the login screen to the user session. This allows a malicious user on the system to take control of the RDP client connection during the login screen-to-user session transition, potentially exposing the system RDP TLS certificate and key to unauthorized users.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-488

Related Identifiers

ALT-PU-2024-8096

BDU:2024-05576

CVE-2024-5148

OPENSUSE-SU-2024:14002-1

USN-6785-1

Affected Products

Alt Linux

Linuxmint

Ubuntu

Gnome-Remote-Desktop

References · 22

• https://nvd.nist.gov/vuln/detail/CVE-2024-5148 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14002-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-5148 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6785-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6785-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-5148 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-5148 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05576 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-5148 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-5148 · Vendor Advisory
• https://twitter.com/cracbot/status/1830848275005743555 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1830626475017445529 · Twitter Post
• https://access.redhat.com/security/cve/CVE-2024-5148 · Note
• https://access.redhat.com/security/cve/cve-2024-5148 · Note
• https://t.me/cvedetector/4638 · Telegram Post