High severity7.1OSV Advisory· Published Apr 18, 2024· Updated Jun 17, 2026

CVE-2023-3758

Description

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

140

SSSD/SssdOSV
Range: 2.4.1, 2.4.2, 2.5.0, …
Red Hat/SSSDllm-fuzzy
Fedoraproject/Sssd
cpe:2.3:a:fedoraproject:sssd:*:*:*:*:*:*:*:*
Range: <2.9.5
Red Hat/Codeready Linux Builder For X86 64
cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:*
Red Hat/Codeready Linux Builder Eus6 versions
cpe:2.3:a:redhat:codeready_linux_builder_eus:8.6:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:redhat:codeready_linux_builder_eus:8.6:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_eus:8.8:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_eus:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_eus:9.2:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_eus:9.4:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:*
Red Hat/Codeready Linux Builder For X86 64 Eus
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:8.0_aarch64:*:*:*:*:*:*:*
Red Hat/Codeready Linux Builder For Arm64 Eus13 versions
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:8.6_aarch64:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:8.6_aarch64:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:8.8_aarch64:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.0_aarch64:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.2_aarch64:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.4_aarch64:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.6_aarch64:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:8.6_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.0_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*
Red Hat/Codeready Linux Builder For Ibm Z Systems
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*
Red Hat/Codeready Linux Builder For Ibm Z Systems Eus6 versions
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.0_s390x:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:*
Red Hat/Virtualization Host
cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Eus6 versions
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Arm 64
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems Eus12 versions
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6_aarch64:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.0_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.2_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.6_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.0_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian Eus6 versions
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6_ppc64le:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.0_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Aus4 versions
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions6 versions
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6_ppc64le:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.8_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.6_ppc64le:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Tus2 versions
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Update Services For Sap Solutions6 versions
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.6:*:*:*:*:*:*:*
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
osv-coords59 versions
pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/almalinux/libipa_hbac pkg:rpm/almalinux/libsss_autofs pkg:rpm/almalinux/libsss_certmap pkg:rpm/almalinux/libsss_idmap pkg:rpm/almalinux/libsss_nss_idmap pkg:rpm/almalinux/libsss_nss_idmap-devel pkg:rpm/almalinux/libsss_simpleifp pkg:rpm/almalinux/libsss_sudo pkg:rpm/almalinux/python3-libipa_hbac pkg:rpm/almalinux/sssd-idp pkg:rpm/almalinux/sssd-ipa pkg:rpm/almalinux/sssd-proxy pkg:rpm/almalinux/sssd-tools pkg:rpm/almalinux/sssd-winbind-idmap pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Micro%206.0 pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/opensuse/sssd&distro=openSUSE%20Leap%2015.5 pkg:rpm/suse/sssd&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/almalinux/python3-libsss_nss_idmap pkg:rpm/almalinux/python3-sss pkg:rpm/almalinux/python3-sss-murmur pkg:rpm/almalinux/python3-sssdconfig pkg:rpm/almalinux/sssd pkg:rpm/almalinux/sssd-ad pkg:rpm/almalinux/sssd-client pkg:rpm/almalinux/sssd-common pkg:rpm/almalinux/sssd-common-pac pkg:rpm/almalinux/sssd-dbus pkg:rpm/almalinux/sssd-kcm pkg:rpm/almalinux/sssd-krb5 pkg:rpm/almalinux/sssd-krb5-common pkg:rpm/almalinux/sssd-ldap pkg:rpm/almalinux/sssd-nfs-idmap pkg:rpm/almalinux/sssd-passkey pkg:rpm/almalinux/sssd-polkit-rules pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/sssd&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/sssd&distro=SUSE%20Manager%20Server%204.3 pkg:rpm/opensuse/sssd&distro=openSUSE%20Leap%20Micro%205.3 pkg:rpm/opensuse/sssd&distro=openSUSE%20Leap%20Micro%205.4 pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/opensuse/sssd&distro=openSUSE%20Leap%2015.6 pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS
< 2.5.2-150400.4.27.1+ 58 more
- (no CPE)range: < 2.5.2-150400.4.27.1
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.8.2-6.1
- (no CPE)range: < 1.16.1-150300.23.43.1
- (no CPE)range: < 1.16.1-7.61.1
- (no CPE)range: < 2.5.2-150500.10.17.1
- (no CPE)range: < 2.5.2-150500.10.17.1
- (no CPE)range: < 1.16.1-150300.23.43.1
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 2.9.4-6.el9_4
- (no CPE)range: < 1.16.1-150200.17.32.1
- (no CPE)range: < 1.16.1-150200.17.32.1
- (no CPE)range: < 2.5.2-150400.4.27.1
- (no CPE)range: < 2.5.2-150400.4.27.1
- (no CPE)range: < 2.5.2-150400.4.27.1
- (no CPE)range: < 2.5.2-150400.4.27.1
- (no CPE)range: < 2.5.2-150400.4.27.1
- (no CPE)range: < 2.5.2-150500.10.17.1
- (no CPE)range: < 2.9.3-150600.3.3.1
- (no CPE)range: < 2.9.3-150600.3.3.1
- (no CPE)range: < 1.16.1-150300.23.43.1
- (no CPE)range: < 1.16.1-150300.23.43.1
- (no CPE)range: < 1.16.1-150300.23.43.1
- (no CPE)range: < 1.16.1-150300.23.43.1
- (no CPE)range: < 1.16.1-150200.17.32.1
- (no CPE)range: < 1.16.1-7.61.1
- (no CPE)range: < 1.16.1-7.61.1
- (no CPE)range: < 2.5.2-150400.4.27.1
- (no CPE)range: < 2.5.2-150400.4.27.1
- (no CPE)range: < 2.5.2-150400.4.27.1
- (no CPE)range: < 2.5.2-150400.4.27.1

Patches

Vulnerability mechanics

References

github.com/SSSD/sssd/pull/7302nvdExploitIssue TrackingPatch
access.redhat.com/errata/RHSA-2024:1919nvdThird Party Advisory
access.redhat.com/errata/RHSA-2024:1920nvdThird Party Advisory
access.redhat.com/errata/RHSA-2024:1921nvdThird Party Advisory
access.redhat.com/errata/RHSA-2024:1922nvdThird Party Advisory
access.redhat.com/errata/RHSA-2024:2571nvdThird Party Advisory
access.redhat.com/errata/RHSA-2024:3270nvdThird Party Advisory
access.redhat.com/security/cve/CVE-2023-3758nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/RV3HIZI3SURBUQKSOOL3XE64OOBQ2HTK/nvdMailing ListThird Party Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/XEP62IDS7A55D5UHM6GH7QZ7SQFOAPVF/nvdMailing ListThird Party Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/XMORAO2BDDA5YX4ZLMXDZ7SM6KU47SY5/nvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2025/02/msg00008.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000