CVE-2023-5616: Medium severity Gnome Control Center vulnerability
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-5616?
CVE-2023-5616 is classified as a medium severity vulnerability due to its potential risk of unauthorized remote SSH access.
How do I fix CVE-2023-5616?
To fix CVE-2023-5616, update gnome-control-center to versions 1:3.36.5-0ubuntu4.1, 1:41.7-0ubuntu0.22.04.8, 1:44.0-1ubuntu6.1, or 1:45.0-1ubuntu3.1 depending on your Ubuntu release.
What systems are affected by CVE-2023-5616?
CVE-2023-5616 affects Ubuntu systems running specific versions of gnome-control-center along with Debian-based systems.
What risks does CVE-2023-5616 pose to users?
CVE-2023-5616 poses the risk of exposing local machines to unauthorized remote SSH access if the remote login status is incorrectly reported.
Is there a workaround for CVE-2023-5616?
While the best solution is to update gnome-control-center, temporarily disabling SSH services can serve as a workaround until a patch is applied.