CVE-2023-5616: Canonical Ltd. Ubuntu's gnome-control-center

Описание

Оригинално описание

In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.

Засегнати продукти

• Canonical Ltd. Ubuntu's gnome-control-center: 1:45 преди 1:45.0-1ubuntu3.1; 1:44 преди 1:44.0-1ubuntu6.1; 1:41 преди 1:41.7-0ubuntu0.22.04.8; 1:3 преди 1:3.36.5-0ubuntu4.1

Вид слабост

• CWE-290 Заобикаляне на автентикация чрез подправяне

История

Други уязвимости в Canonical Ltd. Ubuntu's gnome-control-center

• 9.8CVE-2022-1736

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-5616
• https://nvd.nist.gov/vuln/detail/CVE-2023-5616
• https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/2039577
• https://ubuntu.com/security/notices/USN-6554-1
• https://ubuntu.com/security/CVE-2023-5616