Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-3758

23
FAUCET Score

CVE-2023-3758 is a race condition flaw in SSSD affecting Fedora and Red Hat products, where Group Policy Objects (GPOs) are inconsistently applied for authenticated users, potentially leading to improper authorization. With a CVSS score of 7.1 (HIGH), this vulnerability has an adjacent attack vector and high impact on confidentiality, integrity, and availability, but requires high attack complexity and low privileges. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 2.9.5CPE matchmatch criteria
cpe:2.3:a:fedoraproject:sssd:*:*:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:*
8.6CPE matchmatch criteria
cpe:2.3:a:redhat:codeready_linux_builder_eus:8.6:*:*:*:*:*:*:*
8.8CPE matchmatch criteria
cpe:2.3:a:redhat:codeready_linux_builder_eus:8.8:*:*:*:*:*:*:*
9.0CPE matchmatch criteria
cpe:2.3:a:redhat:codeready_linux_builder_eus:9.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.1HIGH

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.2
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.03%
Probability of exploitation in next 30 days
EPSS Percentile
60.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0103 is in the 80th percentile among its peer group of 45 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (8)

github_advisorypatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: sssd-0:2.9.4-3.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: sssd-0:2.6.2-4.el8_6.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: sssd-0:2.8.2-4.el8_8.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: sssd-0:2.9.4-6.el9_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: sssd-0:2.6.2-4.el9_0.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: sssd-0:2.8.2-5.el9_2.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 8Fixed in: sssd-0:2.6.2-4.el8_6.3
View patch

Vendor Advisories (1)

redhatCVE-2023-3758Moderate

sssd: Race condition during authorization leads to GPO policies functioning inconsistently

Apr 16, 2024

References

lists.debian.org / debian-lts-announce/2025/02/msg00008.html
lists.fedoraproject.org / archives/list/[email protected]/message/RV3HIZI3SURBUQKSOOL3XE64OOBQ2HTK
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/[email protected]/message/XEP62IDS7A55D5UHM6GH7QZ7SQFOAPVF
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/[email protected]/message/XMORAO2BDDA5YX4ZLMXDZ7SM6KU47SY5
Mailing ListThird Party Advisory
access.redhat.com / errata/RHSA-2024:1919
Third Party Advisory
access.redhat.com / errata/RHSA-2024:1920
Third Party Advisory
access.redhat.com / errata/RHSA-2024:1921
Third Party Advisory
access.redhat.com / errata/RHSA-2024:1922
Third Party Advisory
access.redhat.com / errata/RHSA-2024:2571
Third Party Advisory
access.redhat.com / errata/RHSA-2024:3270
Third Party Advisory
access.redhat.com / security/cve/CVE-2023-3758
Third Party Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingThird Party Advisory
github.com / SSSD/sssd/pull/7302
ExploitIssue TrackingPatch