Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-3758

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Published

2024-04-18T19:15:08.597

Last Modified

2025-06-18T19:44:10.783

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.1 (HIGH)

Weaknesses

Type: Primary
CWE-362
Type: Secondary
CWE-362

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	fedoraproject	sssd	< 2.9.5	Yes
Application	redhat	codeready_linux_builder	8.0	Yes
Application	redhat	codeready_linux_builder_eus	8.6	Yes
Application	redhat	codeready_linux_builder_eus	8.8	Yes
Application	redhat	codeready_linux_builder_eus	9.0	Yes
Application	redhat	codeready_linux_builder_eus	9.2	Yes
Application	redhat	codeready_linux_builder_eus	9.4	Yes
Application	redhat	codeready_linux_builder_eus	9.6	Yes
Application	redhat	codeready_linux_builder_for_arm64	8.0_aarch64	Yes
Application	redhat	codeready_linux_builder_for_arm64_eus	8.6_aarch64	Yes
Application	redhat	codeready_linux_builder_for_arm64_eus	8.8_aarch64	Yes
Application	redhat	codeready_linux_builder_for_arm64_eus	9.0_aarch64	Yes
Application	redhat	codeready_linux_builder_for_arm64_eus	9.2_aarch64	Yes
Application	redhat	codeready_linux_builder_for_arm64_eus	9.4_aarch64	Yes
Application	redhat	codeready_linux_builder_for_arm64_eus	9.6_aarch64	Yes
Application	redhat	codeready_linux_builder_for_ibm_z_systems	8.0_s390x	Yes
Application	redhat	codeready_linux_builder_for_ibm_z_systems_eus	8.6_s390x	Yes
Application	redhat	codeready_linux_builder_for_ibm_z_systems_eus	8.8_s390x	Yes
Application	redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.0_s390x	Yes
Application	redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.2_s390x	Yes
Application	redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.4_s390x	Yes
Application	redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.6_s390x	Yes
Application	redhat	codeready_linux_builder_for_power_little_endian	8.0_ppc64le	Yes
Application	redhat	codeready_linux_builder_for_power_little_endian_eus	8.6_ppc64le	Yes
Application	redhat	codeready_linux_builder_for_power_little_endian_eus	8.8_ppc64le	Yes
Application	redhat	codeready_linux_builder_for_power_little_endian_eus	9.0_ppc64le	Yes
Application	redhat	codeready_linux_builder_for_power_little_endian_eus	9.2_ppc64le	Yes
Application	redhat	codeready_linux_builder_for_power_little_endian_eus	9.4_ppc64le	Yes
Application	redhat	codeready_linux_builder_for_power_little_endian_eus	9.6_ppc64le	Yes
Application	redhat	virtualization_host	4.0	Yes
Operating System	redhat	enterprise_linux	8.0	Yes
Operating System	redhat	enterprise_linux_eus	8.6	Yes
Operating System	redhat	enterprise_linux_eus	8.8	Yes
Operating System	redhat	enterprise_linux_eus	9.0	Yes
Operating System	redhat	enterprise_linux_eus	9.2	Yes
Operating System	redhat	enterprise_linux_eus	9.4	Yes
Operating System	redhat	enterprise_linux_eus	9.6	Yes
Operating System	redhat	enterprise_linux_for_arm_64	8.0_aarch64	Yes
Operating System	redhat	enterprise_linux_for_arm_64_eus	8.6_aarch64	Yes
Operating System	redhat	enterprise_linux_for_arm_64_eus	8.8_aarch64	Yes
Operating System	redhat	enterprise_linux_for_arm_64_eus	9.0_aarch64	Yes
Operating System	redhat	enterprise_linux_for_arm_64_eus	9.2_aarch64	Yes
Operating System	redhat	enterprise_linux_for_arm_64_eus	9.4_aarch64	Yes
Operating System	redhat	enterprise_linux_for_arm_64_eus	9.6_aarch64	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems	8.0_s390x	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems_eus	8.6_s390x	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems_eus	8.8_s390x	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems_eus	9.0_s390x	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems_eus	9.2_s390x	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems_eus	9.4_s390x	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems_eus	9.6_s390x	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian	8.0_ppc64le	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian_eus	8.6_ppc64le	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian_eus	8.8_ppc64le	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian_eus	9.0_ppc64le	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian_eus	9.2_ppc64le	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian_eus	9.4_ppc64le	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian_eus	9.6_ppc64le	Yes
Operating System	redhat	enterprise_linux_server_aus	8.6	Yes
Operating System	redhat	enterprise_linux_server_aus	9.2	Yes
Operating System	redhat	enterprise_linux_server_aus	9.4	Yes
Operating System	redhat	enterprise_linux_server_aus	9.6	Yes
Operating System	redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	8.6_ppc64le	Yes
Operating System	redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	8.8_ppc64le	Yes
Operating System	redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	9.0_ppc64le	Yes
Operating System	redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	9.2_ppc64le	Yes
Operating System	redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	9.4_ppc64le	Yes
Operating System	redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	9.6_ppc64le	Yes
Operating System	redhat	enterprise_linux_server_tus	8.6	Yes
Operating System	redhat	enterprise_linux_server_tus	8.8	Yes
Operating System	redhat	enterprise_linux_update_services_for_sap_solutions	8.6	Yes
Operating System	redhat	enterprise_linux_update_services_for_sap_solutions	8.8	Yes
Operating System	redhat	enterprise_linux_update_services_for_sap_solutions	9.0	Yes
Operating System	redhat	enterprise_linux_update_services_for_sap_solutions	9.2	Yes
Operating System	redhat	enterprise_linux_update_services_for_sap_solutions	9.4	Yes
Operating System	redhat	enterprise_linux_update_services_for_sap_solutions	9.6	Yes
Operating System	fedoraproject	fedora	38	Yes
Operating System	fedoraproject	fedora	39	Yes
Operating System	fedoraproject	fedora	40	Yes

References

https://access.redhat.com/errata/RHSA-2024:1919 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2024:1920 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2024:1921 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2024:1922 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2024:2571 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2024:3270 Third Party Advisory ([email protected])
https://access.redhat.com/security/cve/CVE-2023-3758 Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2223762 Issue Tracking, Third Party Advisory ([email protected])
https://github.com/SSSD/sssd/pull/7302 Exploit, Issue Tracking, Patch ([email protected])
https://access.redhat.com/errata/RHSA-2024:1919 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2024:1920 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2024:1921 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2024:1922 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2024:2571 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2024:3270 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/security/cve/CVE-2023-3758 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=2223762 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/SSSD/sssd/pull/7302 Exploit, Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/RV3HIZI3SURBUQKSOOL3XE64OOBQ2HTK/ Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/XEP62IDS7A55D5UHM6GH7QZ7SQFOAPVF/ Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/XMORAO2BDDA5YX4ZLMXDZ7SM6KU47SY5/ Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)