CVE-2023-3758

Katalog CVE

CVSS 7.1 · High EPSS 1,0%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada fedoraproject sssd, redhat codeready linux builder +17 lainnya. Skor CVSS 3.1 7.1 (High) menurut redhat.com.

Deskripsi (NVD)

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Rincian

Terbit di NVD

18 April 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber redhat.com
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 62,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 79 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://github.com/SSSD/sssd/pull/7302 exploit · issue tracking · patch
• https://access.redhat.com/errata/RHSA-2024:1919 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:1920 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:1921 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:1922 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:2571 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:3270 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2023-3758 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2223762 issue tracking · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RV3HIZI3SURBUQK... mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XEP62IDS7A55D5U... mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XMORAO2BDDA5YX4... mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2025/02/msg00008.html