AI_ONLY_REPORT
package: gnome-remote-desktop-49.3-1.el10
------
Summary: Busy-Wait DoS in VNC TLS I/O Handlers (`GNUTLS_E_AGAIN` /
`GNUTLS_E_INTERRUPTED`): retryable TLS read or write results can trap the
VNC event-loop thread in an infinite busy loop, causing sustained CPU
exhaustion and loss of VNC service availability.
Requirements to exploit: An attacker needs network reachability to a
running VNC listener provided by `gnome-remote-desktop`. The issue is
configuration-dependent because VNC must be enabled and the connection must
exercise the TLS VNC path; the shipped VNC schema uses `tls-anon` as the
default allowed encryption method.
Component affected: `gnome-remote-desktop`, VNC TLS handlers in
`src/grd-vnc-tls.c` (`do_read()` and `grd_vnc_tls_write_to_socket()`),
reached from the VNC socket dispatch path in `src/grd-session-vnc.c`.
Version affected: RHEL/CentOS gnome-remote-desktop package versions
>= 0.1.6-1 through <= 40.0-11 when the VNC service is enabled and the TLS
handler path is used (downstream-only).
...
Acknowledgement: Aisle Research