CVE-2023-3758
Sssd: race condition during authorization leads to gpo policies functioning inconsistently
Summary
Sssd: race condition during authorization leads to gpo policies functioning inconsistently
Original description
The description as published by the source.
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-3758 sssd Fixed in: 2.4.1-2+deb11u1
- Ubuntu UBUNTU-CVE-2023-3758 sssd
References
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report bugzilla.redhat.com
- web access.redhat.com
- web lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web sssd.io