DEBIAN-CVE-2023-3758

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2023-3758
Downstream
DLA-4047-1
Published: 18 Apr 2024, 19:15
Last modified:10 May 2026, 17:04

Vulnerability Summary

Overall Risk (default)
medium
28/100
CVSS Score
7.1 HIGH
3.1 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

18 Apr 2024, 19:15
Published
Vulnerability first disclosed
10 May 2026, 17:04
Last Modified
Vulnerability information updated

Description

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

CVSS Metrics

  • v3.1•HIGH•Score: 7.1CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Systems

  • debian•sssd

    < 2.9.5-1 | < 2.4.1-2+deb11u1 | < 2.8.2-4+deb12u1 | < 2.9.5-1

References (1)