ISOMAN

CVE

CVE-2023-5536

A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their privilege to root without requiring a sudo password.

Severity
MEDIUM
CVSS
5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu22.04.5 amd64 desktopunknownsource
Ubuntu22.04.5 amd64 live-serverunknownsource
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1829071
  2. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5536
  3. https://discourse.ubuntu.com/t/easy-multi-user-lxd-setup/26215/4
  4. https://ubuntu.com/security/CVE-2023-5536
  5. https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1829071
  6. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5536
  7. https://discourse.ubuntu.com/t/easy-multi-user-lxd-setup/26215/4
  8. https://ubuntu.com/security/CVE-2023-5536