CVE catalog

CVE-2023-3758

SSSD vulnerability

[CVE catalog]

Severity
High · CVSS 7.1CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.03% · Oct 25, 2026

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately. sssd: Race condition during authorization leads to GPO policies functioning inconsistently This flaw is triggered by a race condition which makes it difficult to exploit. Also, it depends on non default GPO configuration on the server side. This two aspects lowers the severity of the issue to Moderate. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansssdsid2.13.1-3fixed
Debiansssdtrixie2.10.1-2fixed
Debiansssdbookworm2.8.2-4+deb12u1fixed
Ubuntusssdnoble2.8.2-4+deb12u1fixed
Ubuntusssdnoble2.9.4-1.1ubuntu6.1fixed
Ubuntulibipa-hbac-devnoble2.9.4-1.1ubuntu6.1fixed
Ubuntulibipa-hbac0t64noble2.9.4-1.1ubuntu6.1fixed
Ubuntulibnss-sssnoble2.9.4-1.1ubuntu6.1fixed
Ubuntulibpam-sssnoble2.9.4-1.1ubuntu6.1fixed
Ubuntulibsss-certmap-devnoble2.9.4-1.1ubuntu6.1fixed
Ubuntulibsss-certmap0noble2.9.4-1.1ubuntu6.1fixed
Ubuntulibsss-idmap-devnoble2.9.4-1.1ubuntu6.1fixed
Ubuntulibsss-idmap0noble2.9.4-1.1ubuntu6.1fixed
Ubuntulibsss-nss-idmap-devnoble2.9.4-1.1ubuntu6.1fixed
Ubuntulibsss-nss-idmap0noble2.9.4-1.1ubuntu6.1fixed
Ubuntulibsss-sudonoble2.9.4-1.1ubuntu6.1fixed
Ubuntupython3-libipa-hbacnoble2.9.4-1.1ubuntu6.1fixed
Ubuntupython3-libsss-nss-idmapnoble2.9.4-1.1ubuntu6.1fixed
Ubuntupython3-sssnoble2.9.4-1.1ubuntu6.1fixed
Ubuntusssd-adnoble2.9.4-1.1ubuntu6.1fixed
Ubuntusssd-ad-commonnoble2.9.4-1.1ubuntu6.1fixed
Ubuntusssd-commonnoble2.9.4-1.1ubuntu6.1fixed
Ubuntusssd-dbusnoble2.9.4-1.1ubuntu6.1fixed
Ubuntusssd-idpnoble2.9.4-1.1ubuntu6.1fixed
Ubuntusssd-ipanoble2.9.4-1.1ubuntu6.1fixed
Ubuntusssd-kcmnoble2.9.4-1.1ubuntu6.1fixed
Ubuntusssd-krb5noble2.9.4-1.1ubuntu6.1fixed
Ubuntusssd-krb5-commonnoble2.9.4-1.1ubuntu6.1fixed
Ubuntusssd-ldapnoble2.9.4-1.1ubuntu6.1fixed
Ubuntusssd-passkeynoble2.9.4-1.1ubuntu6.1fixed
Ubuntusssd-proxynoble2.9.4-1.1ubuntu6.1fixed
Ubuntusssd-toolsnoble2.9.4-1.1ubuntu6.1fixed
Ubuntusssdpro1.15.3-2ubuntu1vulnerable
Ubuntusssdpro1.15.3-3ubuntu1vulnerable
Ubuntusssdpro1.16.0-5ubuntu1vulnerable
Ubuntusssdpro1.16.0-5ubuntu2vulnerable
Ubuntusssdpro1.16.1-1ubuntu1vulnerable
Ubuntusssdpro1.16.1-1ubuntu1.1vulnerable
Ubuntusssdpro1.16.1-1ubuntu1.2vulnerable
Ubuntusssdpro1.16.1-1ubuntu1.3vulnerable
Ubuntusssdpro1.16.1-1ubuntu1.4vulnerable
Ubuntusssdpro1.16.1-1ubuntu1.5vulnerable
Ubuntusssdpro1.16.1-1ubuntu1.6vulnerable
Ubuntusssdpro1.16.1-1ubuntu1.7vulnerable
Ubuntusssdpro1.16.1-1ubuntu1.8vulnerable
Ubuntusssdpro1.16.1-1ubuntu1.8+esm1vulnerable
Ubuntusssd20.042.2.0-4ubuntu1vulnerable
Ubuntusssd20.042.2.2-1vulnerable
Ubuntusssd20.042.2.2-1ubuntu1vulnerable
Ubuntusssd20.042.2.3-1.1ubuntu1vulnerable
Ubuntusssd20.042.2.3-2vulnerable
Ubuntusssd20.042.2.3-3vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.1vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.2vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.3vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.4vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.6vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.7vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.8vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.9vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.10vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.11vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.12vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.13fixed
Ubuntusssd22.042.4.1-2ubuntu4vulnerable
Ubuntusssd22.042.5.2-4ubuntu1vulnerable
Ubuntusssd22.042.5.2-4ubuntu3vulnerable
Ubuntusssd22.042.5.2-4ubuntu4vulnerable
Ubuntusssd22.042.6.1-1ubuntu3vulnerable
Ubuntusssd22.042.6.3-1ubuntu3vulnerable
Ubuntusssd22.042.6.3-1ubuntu3.1vulnerable
Ubuntusssd22.042.6.3-1ubuntu3.2vulnerable
Ubuntusssd22.042.6.3-1ubuntu3.3fixed
Ubuntusssd24.042.9.1-2ubuntu2vulnerable
Ubuntusssd24.042.9.1-2ubuntu3vulnerable
Ubuntusssd24.042.9.2-1ubuntu2vulnerable
Ubuntusssd24.042.9.4-1ubuntu1vulnerable
Ubuntusssd24.042.9.4-1.1ubuntu3vulnerable
Ubuntusssd24.042.9.4-1.1ubuntu5vulnerable
Ubuntusssd24.042.9.4-1.1ubuntu6vulnerable
Ubuntusssd24.042.9.4-1.1ubuntu6.1fixed
Ubuntusssd20.042.2.0-4ubuntu1vulnerable
Ubuntusssd20.042.2.2-1vulnerable
Ubuntusssd20.042.2.2-1ubuntu1vulnerable
Ubuntusssd20.042.2.3-1.1ubuntu1vulnerable
Ubuntusssd20.042.2.3-2vulnerable
Ubuntusssd20.042.2.3-3vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.1vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.2vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.3vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.4vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.6vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.7vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.8vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.9vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.10vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.11vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.12vulnerable
Ubuntusssd20.042.2.3-3ubuntu0.13fixed
Ubuntusssd22.042.4.1-2ubuntu4vulnerable
Ubuntusssd22.042.5.2-4ubuntu1vulnerable
Ubuntusssd22.042.5.2-4ubuntu3vulnerable
Ubuntusssd22.042.5.2-4ubuntu4vulnerable
Ubuntusssd22.042.6.1-1ubuntu3vulnerable
Ubuntusssd22.042.6.3-1ubuntu3vulnerable
Ubuntusssd22.042.6.3-1ubuntu3.1vulnerable
Ubuntusssd22.042.6.3-1ubuntu3.2vulnerable
Ubuntusssd22.042.6.3-1ubuntu3.3fixed
Ubuntusssd24.042.9.1-2ubuntu2vulnerable
Ubuntusssd24.042.9.1-2ubuntu3vulnerable
Ubuntusssd24.042.9.2-1ubuntu2vulnerable
Ubuntusssd24.042.9.4-1ubuntu1vulnerable
Ubuntusssd24.042.9.4-1.1ubuntu3vulnerable
Ubuntusssd24.042.9.4-1.1ubuntu5vulnerable
Ubuntusssd24.042.9.4-1.1ubuntu6vulnerable
Ubuntusssd24.042.9.4-1.1ubuntu6.1fixed
Susesssdlinux micro 6.02.8.2-6.1fixed
Susesssdlinux enterprise micro 5.52.5.2-150500.10.17.1fixed
Susesssdlinux enterprise module for basesystem 15 sp52.5.2-150500.10.17.1fixed
Opensusesssdleap 15.52.5.2-150500.10.17.1fixed
Susesssdlinux enterprise micro 5.32.5.2-150400.4.27.1fixed
Susesssdlinux enterprise micro 5.42.5.2-150400.4.27.1fixed
Susesssdlinux enterprise high performance computing 15 sp4-espos2.5.2-150400.4.27.1fixed
Susesssdlinux enterprise high performance computing 15 sp4-ltss2.5.2-150400.4.27.1fixed
Susesssdlinux enterprise server 15 sp4-ltss2.5.2-150400.4.27.1fixed
Susesssdlinux enterprise server for sap applications 15 sp42.5.2-150400.4.27.1fixed
Susesssdmanager proxy 4.32.5.2-150400.4.27.1fixed
Susesssdmanager server 4.32.5.2-150400.4.27.1fixed
Opensusesssdleap micro 5.32.5.2-150400.4.27.1fixed
Opensusesssdleap micro 5.42.5.2-150400.4.27.1fixed
Susesssdlinux enterprise high performance computing 15 sp2-ltss1.16.1-150200.17.32.1fixed
Susesssdlinux enterprise server 15 sp2-ltss1.16.1-150200.17.32.1fixed
Susesssdlinux enterprise server for sap applications 15 sp21.16.1-150200.17.32.1fixed
Susesssdlinux enterprise software development kit 12 sp51.16.1-7.61.1fixed
Susesssdlinux enterprise server 12 sp51.16.1-7.61.1fixed
Susesssdlinux enterprise server for sap applications 12 sp51.16.1-7.61.1fixed
Susesssdlinux enterprise high performance computing 15 sp3-ltss1.16.1-150300.23.43.1fixed
Susesssdlinux enterprise server 15 sp3-ltss1.16.1-150300.23.43.1fixed
Susesssdlinux enterprise server for sap applications 15 sp31.16.1-150300.23.43.1fixed
Susesssdlinux enterprise micro 5.11.16.1-150300.23.43.1fixed
Susesssdlinux enterprise micro 5.21.16.1-150300.23.43.1fixed
Susesssdenterprise storage 7.11.16.1-150300.23.43.1fixed
Susesssdlinux enterprise module for basesystem 15 sp62.9.3-150600.3.3.1fixed
Opensusesssdleap 15.62.9.3-150600.3.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansssdsourcesid2.9.5-1not yet assignedNot reported[1070369]
Debiansssdsourcetrixie2.9.5-1not yet assignedNot reported[1070369]
Debiansssdsourcebookworm2.8.2-4+deb12u1not yet assignedNot reported[1070369]
Ubuntusssddebnoble2.8.2-4+deb12u1Not reportedNot reportedNot reported
Ubuntusssddebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntulibipa-hbac-devdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntulibipa-hbac0t64debnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntulibnss-sssdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntulibpam-sssdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntulibsss-certmap-devdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntulibsss-certmap0debnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntulibsss-idmap-devdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntulibsss-idmap0debnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntulibsss-nss-idmap-devdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntulibsss-nss-idmap0debnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntulibsss-sudodebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntupython3-libipa-hbacdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntupython3-libsss-nss-idmapdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntupython3-sssdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssd-addebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssd-ad-commondebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssd-commondebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssd-dbusdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssd-idpdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssd-ipadebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssd-kcmdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssd-krb5debnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssd-krb5-commondebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssd-ldapdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssd-passkeydebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssd-proxydebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssd-toolsdebnoble2.9.4-1.1ubuntu6.1Not reportedNot reportedNot reported
Ubuntusssddeb20.042.2.3-3ubuntu0.13Not reportedUBUNTU-CVE-2023-3758Not reported
Ubuntusssddeb22.042.6.3-1ubuntu3.3Not reportedUBUNTU-CVE-2023-3758Not reported
Ubuntusssddeb24.042.9.4-1.1ubuntu6.1Not reportedUBUNTU-CVE-2023-3758Not reported
Ubuntusssddeb20.042.2.3-3ubuntu0.13Not reportedUSN-6836-1Not reported
Ubuntusssddeb22.042.6.3-1ubuntu3.3Not reportedUSN-6836-1Not reported
Ubuntusssddeb24.042.9.4-1.1ubuntu6.1Not reportedUSN-6836-1Not reported
Susesssdrpmlinux micro 6.02.8.2-6.1Not reportedSUSE-SU-2025:20131-1Not reported
Susesssdrpmlinux enterprise micro 5.52.5.2-150500.10.17.1Not reportedSUSE-SU-2024:1579-1Not reported
Susesssdrpmlinux enterprise module for basesystem 15 sp52.5.2-150500.10.17.1Not reportedSUSE-SU-2024:1579-1Not reported
Opensusesssdrpmleap 15.52.5.2-150500.10.17.1Not reportedSUSE-SU-2024:1579-1Not reported
Susesssdrpmlinux enterprise micro 5.32.5.2-150400.4.27.1Not reportedSUSE-SU-2024:1578-1Not reported
Susesssdrpmlinux enterprise micro 5.42.5.2-150400.4.27.1Not reportedSUSE-SU-2024:1578-1Not reported
Susesssdrpmlinux enterprise high performance computing 15 sp4-espos2.5.2-150400.4.27.1Not reportedSUSE-SU-2024:1578-1Not reported
Susesssdrpmlinux enterprise high performance computing 15 sp4-ltss2.5.2-150400.4.27.1Not reportedSUSE-SU-2024:1578-1Not reported
Susesssdrpmlinux enterprise server 15 sp4-ltss2.5.2-150400.4.27.1Not reportedSUSE-SU-2024:1578-1Not reported
Susesssdrpmlinux enterprise server for sap applications 15 sp42.5.2-150400.4.27.1Not reportedSUSE-SU-2024:1578-1Not reported
Susesssdrpmmanager proxy 4.32.5.2-150400.4.27.1Not reportedSUSE-SU-2024:1578-1Not reported
Susesssdrpmmanager server 4.32.5.2-150400.4.27.1Not reportedSUSE-SU-2024:1578-1Not reported
Opensusesssdrpmleap micro 5.32.5.2-150400.4.27.1Not reportedSUSE-SU-2024:1578-1Not reported
Opensusesssdrpmleap micro 5.42.5.2-150400.4.27.1Not reportedSUSE-SU-2024:1578-1Not reported
Susesssdrpmlinux enterprise high performance computing 15 sp2-ltss1.16.1-150200.17.32.1Not reportedSUSE-SU-2024:1563-1Not reported
Susesssdrpmlinux enterprise server 15 sp2-ltss1.16.1-150200.17.32.1Not reportedSUSE-SU-2024:1563-1Not reported
Susesssdrpmlinux enterprise server for sap applications 15 sp21.16.1-150200.17.32.1Not reportedSUSE-SU-2024:1563-1Not reported
Susesssdrpmlinux enterprise software development kit 12 sp51.16.1-7.61.1Not reportedSUSE-SU-2024:1577-1Not reported
Susesssdrpmlinux enterprise server 12 sp51.16.1-7.61.1Not reportedSUSE-SU-2024:1577-1Not reported
Susesssdrpmlinux enterprise server for sap applications 12 sp51.16.1-7.61.1Not reportedSUSE-SU-2024:1577-1Not reported
Susesssdrpmlinux enterprise high performance computing 15 sp3-ltss1.16.1-150300.23.43.1Not reportedSUSE-SU-2024:1549-1Not reported
Susesssdrpmlinux enterprise server 15 sp3-ltss1.16.1-150300.23.43.1Not reportedSUSE-SU-2024:1549-1Not reported
Susesssdrpmlinux enterprise server for sap applications 15 sp31.16.1-150300.23.43.1Not reportedSUSE-SU-2024:1549-1Not reported
Susesssdrpmlinux enterprise micro 5.11.16.1-150300.23.43.1Not reportedSUSE-SU-2024:1549-1Not reported
Susesssdrpmlinux enterprise micro 5.21.16.1-150300.23.43.1Not reportedSUSE-SU-2024:1549-1Not reported
Susesssdrpmenterprise storage 7.11.16.1-150300.23.43.1Not reportedSUSE-SU-2024:1549-1Not reported
Susesssdrpmlinux enterprise module for basesystem 15 sp62.9.3-150600.3.3.1Not reportedSUSE-SU-2024:1941-1Not reported
Opensusesssdrpmleap 15.62.9.3-150600.3.3.1Not reportedSUSE-SU-2024:1941-1Not reported

[Debian bug #1070369]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References