Summary
It was discovered that SSSD did not always correctly apply the GPO policy
for authenticated users, contrary to expectations. This could result in
improper authorization or improper access to resources.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | sssd | 2.2.3-3ubuntu0.13 |
| Ubuntu · 22.04 LTS 22.04:LTS | sssd | 2.6.3-1ubuntu3.3 |
| Ubuntu · 24.04 LTS 24.04:LTS | sssd | 2.9.4-1.1ubuntu6.1 |
Vulnerabilities 1
-
High 7.1
Sssd: race condition during authorization leads to gpo policies functioning inconsistently
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.
References
-
report
https://ubuntu.com/security/CVE-2023-3758