Ubuntu update for gnome-control-center

1) Insufficient UI Warning of Dangerous Operations

EUVDB-ID: #VU84370

Risk: Low

CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-5616

CWE-ID: CWE-357 - Insufficient UI Warning of Dangerous Operations

Exploit availability: No

Description

The vulnerability allows a remote attacker to bypass expected security restrictions.

The vulnerability exists due to an error in GNOME Settings that did not accurately reflect the SSH remote login status when the system was configured to use systemd socket activation for OpenSSH. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.

Mitigation

Update the affected package gnome-control-center to the latest version.

Vulnerable software versions

Ubuntu: 20.04 - 23.10

gnome-control-center (Ubuntu package): before 1:3.36.5-0ubuntu4.1

CPE2.3

• cpe:2.3:o:canonical:ubuntu:20.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:23.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:23.10:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:gnome-control-center_ubuntu_package:*:*:*:*:*:ubuntu:*:*

External links

https://ubuntu.com/security/notices/USN-6554-1

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.