CVE-2023-3758 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.1 HIGH	ADJACENT_NETWORK	HIGH	LOW	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
redhat	CNA	7.1 HIGH	ADJACENT_NETWORK	HIGH	LOW	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA-ADP	ADP	7.1 HIGH	ADJACENT_NETWORK	HIGH	LOW	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE	ADP	---				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 6%

Debian Releases

Debian Product

Codename

sssd

bullseye	no-dsa
bookworm	no-dsa
buster	postponed
trixie	2.9.5-5 fixed
sid	2.9.5-5 fixed

Ubuntu Releases

Ubuntu Product

Codename

sssd

oracular	Fixed 2.9.4-1.1ubuntu7 released
noble	Fixed 2.9.4-1.1ubuntu6.1 released
mantic	Fixed 2.9.1-2ubuntu2.1 released
jammy	Fixed 2.6.3-1ubuntu3.3 released
focal	Fixed 2.2.3-3ubuntu0.13 released
bionic	needs-triage
xenial	needs-triage

Common Weakness Enumeration

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References

https://access.redhat.com/errata/RHSA-2024:1919

https://access.redhat.com/errata/RHSA-2024:1920

https://access.redhat.com/errata/RHSA-2024:1921

https://access.redhat.com/errata/RHSA-2024:1922

https://access.redhat.com/errata/RHSA-2024:2571

https://access.redhat.com/errata/RHSA-2024:3270

https://access.redhat.com/security/cve/CVE-2023-3758

https://bugzilla.redhat.com/show_bug.cgi?id=2223762

https://github.com/SSSD/sssd/pull/7302

https://access.redhat.com/errata/RHSA-2024:1919

https://access.redhat.com/errata/RHSA-2024:1920

https://access.redhat.com/errata/RHSA-2024:1921

https://access.redhat.com/errata/RHSA-2024:1922

https://access.redhat.com/errata/RHSA-2024:2571

https://access.redhat.com/errata/RHSA-2024:3270

https://access.redhat.com/security/cve/CVE-2023-3758

https://bugzilla.redhat.com/show_bug.cgi?id=2223762

https://github.com/SSSD/sssd/pull/7302

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RV3HIZI3SURBUQKSOOL3XE64OOBQ2HTK/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XEP62IDS7A55D5UHM6GH7QZ7SQFOAPVF/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XMORAO2BDDA5YX4ZLMXDZ7SM6KU47SY5/