UBUNTU-CVE-2023-5616

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2023-5616
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-5616.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2023-5616
Related
Published
2023-12-13T00:00:00Z
Modified
2025-06-02T17:22:00Z
Severity
  • 4.9 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
[none]
Details

In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.

References

Affected packages

Ubuntu:Pro:16.04:LTS / gnome-control-center

Package

Name
gnome-control-center
Purl
pkg:deb/ubuntu/gnome-control-center@1:3.18.2-1ubuntu6.1?arch=source&distro=esm-apps/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:3.*

1:3.16.3-0ubuntu1
1:3.16.3-0ubuntu3
1:3.18.1-1ubuntu1
1:3.18.2-1ubuntu1
1:3.18.2-1ubuntu2
1:3.18.2-1ubuntu3
1:3.18.2-1ubuntu4
1:3.18.2-1ubuntu5
1:3.18.2-1ubuntu6
1:3.18.2-1ubuntu6.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / gnome-control-center

Package

Name
gnome-control-center
Purl
pkg:deb/ubuntu/gnome-control-center@1:3.28.2-0ubuntu0.18.04.6?arch=source&distro=esm-infra/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:3.*

1:3.26.1-0ubuntu4
1:3.26.1-0ubuntu5
1:3.26.1-0ubuntu6
1:3.26.1-0ubuntu7
1:3.26.2-0ubuntu1
1:3.26.2-0ubuntu2
1:3.26.2-0ubuntu3
1:3.26.2-0ubuntu5
1:3.27.92-1ubuntu1
1:3.28.0-0ubuntu1
1:3.28.0-0ubuntu2
1:3.28.0-0ubuntu3
1:3.28.0-0ubuntu4
1:3.28.0-0ubuntu5
1:3.28.0-0ubuntu6
1:3.28.1-0ubuntu1
1:3.28.1-0ubuntu1.18.04.1
1:3.28.1-0ubuntu1.18.04.2
1:3.28.2-0ubuntu0.18.04.1
1:3.28.2-0ubuntu0.18.04.2
1:3.28.2-0ubuntu0.18.04.3
1:3.28.2-0ubuntu0.18.04.4
1:3.28.2-0ubuntu0.18.04.5
1:3.28.2-0ubuntu0.18.04.6

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / gnome-control-center

Package

Name
gnome-control-center
Purl
pkg:deb/ubuntu/gnome-control-center@1:3.36.5-0ubuntu4.1?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:3.36.5-0ubuntu4.1

Affected versions

1:3.*

1:3.34.1-1ubuntu2
1:3.34.1-1ubuntu3
1:3.35.90-0ubuntu1
1:3.35.91-0ubuntu1
1:3.35.91-0ubuntu2
1:3.35.91-0ubuntu3
1:3.35.92-1ubuntu1
1:3.36.0-0ubuntu2
1:3.36.0-0ubuntu3
1:3.36.1-1ubuntu1
1:3.36.1-1ubuntu2
1:3.36.1-1ubuntu3
1:3.36.1-1ubuntu4
1:3.36.1-1ubuntu5
1:3.36.2-0ubuntu1
1:3.36.3-0ubuntu1
1:3.36.4-0ubuntu1
1:3.36.4-0ubuntu2
1:3.36.5-0ubuntu1
1:3.36.5-0ubuntu2
1:3.36.5-0ubuntu3
1:3.36.5-0ubuntu4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1:3.36.5-0ubuntu4.1",
            "binary_name": "gnome-control-center"
        },
        {
            "binary_version": "1:3.36.5-0ubuntu4.1",
            "binary_name": "gnome-control-center-data"
        },
        {
            "binary_version": "1:3.36.5-0ubuntu4.1",
            "binary_name": "gnome-control-center-dbgsym"
        },
        {
            "binary_version": "1:3.36.5-0ubuntu4.1",
            "binary_name": "gnome-control-center-dev"
        },
        {
            "binary_version": "1:3.36.5-0ubuntu4.1",
            "binary_name": "gnome-control-center-faces"
        }
    ],
    "availability": "No subscription required",
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / gnome-control-center

Package

Name
gnome-control-center
Purl
pkg:deb/ubuntu/gnome-control-center@1:41.7-0ubuntu0.22.04.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:41.7-0ubuntu0.22.04.8

Affected versions

1:40.*

1:40.0-1ubuntu5

1:41.*

1:41.1-1ubuntu1
1:41.1-1ubuntu2
1:41.1-1ubuntu3
1:41.2-2ubuntu1
1:41.4-1ubuntu2
1:41.4-1ubuntu3
1:41.4-1ubuntu3.1
1:41.4-1ubuntu6
1:41.4-1ubuntu8
1:41.4-1ubuntu9
1:41.4-1ubuntu10
1:41.4-1ubuntu11
1:41.4-1ubuntu12
1:41.4-1ubuntu13
1:41.4-1ubuntu13.2
1:41.7-0ubuntu0.22.04.1
1:41.7-0ubuntu0.22.04.4
1:41.7-0ubuntu0.22.04.5
1:41.7-0ubuntu0.22.04.6
1:41.7-0ubuntu0.22.04.7

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1:41.7-0ubuntu0.22.04.8",
            "binary_name": "gnome-control-center"
        },
        {
            "binary_version": "1:41.7-0ubuntu0.22.04.8",
            "binary_name": "gnome-control-center-data"
        },
        {
            "binary_version": "1:41.7-0ubuntu0.22.04.8",
            "binary_name": "gnome-control-center-dbgsym"
        },
        {
            "binary_version": "1:41.7-0ubuntu0.22.04.8",
            "binary_name": "gnome-control-center-dev"
        },
        {
            "binary_version": "1:41.7-0ubuntu0.22.04.8",
            "binary_name": "gnome-control-center-faces"
        }
    ],
    "availability": "No subscription required",
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / gnome-control-center

Package

Name
gnome-control-center
Purl
pkg:deb/ubuntu/gnome-control-center@1:45.0-1ubuntu4?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:45.0-1ubuntu4

Affected versions

1:45.*

1:45.0-1ubuntu2
1:45.0-1ubuntu3

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1:45.0-1ubuntu4",
            "binary_name": "gnome-control-center"
        },
        {
            "binary_version": "1:45.0-1ubuntu4",
            "binary_name": "gnome-control-center-data"
        },
        {
            "binary_version": "1:45.0-1ubuntu4",
            "binary_name": "gnome-control-center-dbgsym"
        },
        {
            "binary_version": "1:45.0-1ubuntu4",
            "binary_name": "gnome-control-center-dev"
        },
        {
            "binary_version": "1:45.0-1ubuntu4",
            "binary_name": "gnome-control-center-faces"
        }
    ],
    "availability": "No subscription required",
    "ubuntu_priority": "medium"
}