CVE-2023-5616
Medium
Description
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.
SeverityMedium
CVSS4.9
Exploit probability—
ProductGnome Control Center
PublishedApr 15, 2025
First seenApr 15, 2025
Weakness typeCWE-290CWE-290
How to fix
Update
- gnome control_center1.3.36.5-0ubuntu4.1, 1.41.7-0ubuntu0.22.04.8, 1.44.0-1ubuntu6.1, 1.45.0-1ubuntu3.1 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnome control_center | 1.3 ≤ v < 1.3.36.5-0ubuntu4.1, 1.41 ≤ v < 1.41.7-0ubuntu0.22.04.8, 1.44 ≤ v < 1.44.0-1ubuntu6.1, 1.45 ≤ v < 1.45.0-1ubuntu3.1 | 1.3.36.5-0ubuntu4.1, 1.41.7-0ubuntu0.22.04.8, 1.44.0-1ubuntu6.1, 1.45.0-1ubuntu3.1 |
| canonical ubuntu_linux | 20.04, 22.04, 23.04, 23.10 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.