このページは Ubuntu 向けの修正状況です。脆弱性そのものの説明は CVE 本体のページにあります。
CVE-2023-3758 の詳細 →
UBUNTU-CVE-2023-3758
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorizat...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.
出典: OSV.dev (Open Source Vulnerabilities) OSV
影響パッケージ
Ubuntu:Pro:16.04:LTS
sssd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:18.04:LTS
sssd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:20.04:LTS
sssd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.3-3ubuntu0.13"}]}]
Ubuntu:22.04:LTS
sssd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-1ubuntu3.3"}]}]
Ubuntu:24.04:LTS
sssd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-1.1ubuntu6.1"}]}]
参照URL
- advisory ubuntu.com
- report ubuntu.com
- report cve.org
- report github.com
- report access.redhat.com
- report access.redhat.com
- report access.redhat.com
- report access.redhat.com
- report access.redhat.com