CVE-2023-5536
Medium
Description
A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their privilege to root without requiring a sudo password.
SeverityMedium
CVSS5.0
Exploit probability16. percentile0.2%
ProductCanonical Ubuntu Linux
PublishedDec 12, 2023
First seenDec 12, 2023
How to fix
Update
- canonical ubuntu_linux24.04 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| canonical ubuntu_linux | v < 24.04 | 24.04 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.