This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page. View CVE-2023-3758 →

UBUNTU-CVE-2023-3758

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorizat...

Original description

The description as published by the source.

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Ubuntu:Pro:16.04:LTS sssd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Ubuntu:Pro:18.04:LTS sssd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Ubuntu:20.04:LTS sssd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.3-3ubuntu0.13"}]}]

Ubuntu:22.04:LTS sssd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-1ubuntu3.3"}]}]

Ubuntu:24.04:LTS sssd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-1.1ubuntu6.1"}]}]

Original description

Affected packages

References