CVE-2023-5616
Severity
4.9MEDIUM
EPSS
0.0%
top 88.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 15
Description
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:LExploitability: 1.4 | Impact: 3.4
Affected Packages2 packages
Also affects: Ubuntu Linux 20.04, 22.04, 23.04, 23.10
🔴Vulnerability Details
3OSV▶
CVE-2023-5616: In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for o↗2025-04-15
GHSA▶
GHSA-78gq-q74g-w632: In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for o↗2025-04-15
CVEList▶
CVE-2023-5616: In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for o↗2025-04-15