CVE-2023-5536
A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows...
5.0 MediumPublic exploit
A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their privilege to root without requiring a sudo password.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
0.24%Up 0.2 points since Dec 12, 2023
What each source reports
CVE List Score used
A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their privilege to root without requiring a sudo password.
- Record
CVE-2023-5536- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
EUVDEUVD-2023-57848
A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their privilege to root without requiring a sudo password.
- Record
EUVD-2023-57848- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7w5c-q3c8-5c62
A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows...
A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their privilege to root without requiring a sudo password.
- Record
GHSA-7w5c-q3c8-5c62- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N - Weakness
- CWE-276
- Updated
- 2026-11-02
NVD
A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their privilege to root without requiring a sudo password.
- Record
CVE-2023-5536- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N - CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-276
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-5536
A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their privilege to root without requiring a sudo password.
- Record
UBUNTU-CVE-2023-5536- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N - CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cloud-initUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 0.7.7~bzr1149-0ubuntu10.7.7~bzr1154-0ubuntu10.7.7~bzr1155-0ubuntu10.7.7~bzr1156-0ubuntu10.7.7~bzr1156-0ubuntu2 Show 45 moreShow less0.7.7~bzr1160-0ubuntu10.7.7~bzr1176-0ubuntu10.7.7~bzr1182-0ubuntu10.7.7~bzr1189-0ubuntu10.7.7~bzr1192-0ubuntu10.7.7~bzr1192-0ubuntu20.7.7~bzr1200-0ubuntu10.7.7~bzr1208-0ubuntu10.7.7~bzr1209-0ubuntu10.7.7~bzr1212-0ubuntu10.7.7~bzr1246-0ubuntu1~16.04.10.7.7~bzr1256-0ubuntu1~16.04.10.7.8-1-g3705bb5-0ubuntu1~16.04.10.7.8-1-g3705bb5-0ubuntu1~16.04.30.7.8-49-g9e904bb-0ubuntu1~16.04.10.7.8-49-g9e904bb-0ubuntu1~16.04.20.7.8-49-g9e904bb-0ubuntu1~16.04.30.7.8-49-g9e904bb-0ubuntu1~16.04.40.7.9-0ubuntu1~16.04.20.7.9-48-g1c795b9-0ubuntu1~16.04.10.7.9-90-g61eb03fe-0ubuntu1~16.04.10.7.9-113-g513e99e0-0ubuntu1~16.04.10.7.9-153-g16a7302f-0ubuntu1~16.04.10.7.9-153-g16a7302f-0ubuntu1~16.04.20.7.9-233-ge586fe35-0ubuntu1~16.04.10.7.9-233-ge586fe35-0ubuntu1~16.04.217.1-27-geb292c18-0ubuntu1~16.04.117.1-46-g7acc9e68-0ubuntu1~16.04.117.2-35-gf576b2a2-0ubuntu1~16.04.218.2-4-g05926e48-0ubuntu1~16.04.118.2-4-g05926e48-0ubuntu1~16.04.218.3-9-g2e62cb8a-0ubuntu1~16.04.218.4-0ubuntu1~16.04.218.5-21-g8ee294d5-0ubuntu1~16.04.118.5-45-g3554ffe8-0ubuntu1~16.04.119.1-1-gbaa47854-0ubuntu1~16.04.119.2-24-ge7881d5c-0ubuntu1~16.04.119.2-36-g059d049c-0ubuntu1~16.04.119.2-36-g059d049c-0ubuntu2~16.04.119.3-41-gc4735dd3-0ubuntu1~16.04.119.4-33-gbb4131a2-0ubuntu1~16.04.120.2-45-g5f7825e2-0ubuntu1~16.04.120.3-2-g371b392c-0ubuntu1~16.04.120.4-0ubuntu1~16.04.120.4-0ubuntu1~16.04.2 |
None known |
cloud-initUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 17.1-18-gd4f70470-0ubuntu117.1-25-g17a15f9e-0ubuntu1~17.10.117.1-25-g17a15f9e-0ubuntu117.1-27-geb292c18-0ubuntu117.1-41-g76243487-0ubuntu1 Show 45 moreShow less17.1-46-g7acc9e68-0ubuntu117.1-51-g05b2308a-0ubuntu117.1-53-ga5dc0f42-0ubuntu117.1-58-g703241a3-0ubuntu117.1-60-ga30a3bb5-0ubuntu117.2-1-g4089e20c-0ubuntu117.2-9-gdf24daa8-0ubuntu117.2-13-g6299e8d0-0ubuntu117.2-20-g32a6a176-0ubuntu117.2-25-gc03bdd3d-0ubuntu117.2-30-gf7deaf15-0ubuntu117.2-34-g644048e3-0ubuntu118.1-0ubuntu118.1-5-g40e77380-0ubuntu118.1-17-g97012fbb-0ubuntu118.1-23-gde34dc7c-0ubuntu118.1-26-g685f9901-0ubuntu118.1-35-ge0f644b7-0ubuntu118.1-35-ge0f644b7-0ubuntu218.2-0ubuntu118.2-4-g05926e48-0ubuntu118.2-4-g05926e48-0ubuntu218.2-9-g49b562c9-0ubuntu118.2-14-g6d48d265-0ubuntu118.2-27-g6ef92c98-0ubuntu1~18.04.118.3-9-g2e62cb8a-0ubuntu1~18.04.218.4-0ubuntu1~18.04.118.5-21-g8ee294d5-0ubuntu1~18.04.118.5-45-g3554ffe8-0ubuntu1~18.04.119.1-1-gbaa47854-0ubuntu1~18.04.119.2-24-ge7881d5c-0ubuntu1~18.04.119.2-36-g059d049c-0ubuntu1~18.04.119.2-36-g059d049c-0ubuntu2~18.04.119.3-41-gc4735dd3-0ubuntu1~18.04.119.4-33-gbb4131a2-0ubuntu1~18.04.120.2-45-g5f7825e2-0ubuntu1~18.04.120.3-2-g371b392c-0ubuntu1~18.04.120.4-0ubuntu1~18.04.120.4-0ubuntu1~18.04.220.4.1-0ubuntu1~18.04.121.1-19-gbad84ad4-0ubuntu1~18.04.121.1-19-gbad84ad4-0ubuntu1~18.04.221.2-3-g899bfaa9-0ubuntu2~18.04.121.3-1-g6803368d-0ubuntu1~18.04.321.3-1-g6803368d-0ubuntu1~18.04.4 |
None known |
subiquityUbuntu:18.04:LTS |
All versions, plus listed versions 0.0.29 |
None known |
cloud-initUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 19.2-36-g059d049c-0ubuntu319.2-78-ge8138959-0ubuntu119.3-0ubuntu119.3-23-gfb04493e-0ubuntu119.3-30-g4bc399e0-0ubuntu1 Show 45 moreShow less19.3-40-gf69d33a7-0ubuntu119.3-41-gc4735dd3-0ubuntu119.3-74-g129b1c4e-0ubuntu119.4-1-g8c96cbc1-0ubuntu119.4-16-gf8950d63-0ubuntu119.4-31-g3f6192b3-0ubuntu119.4-33-gbb4131a2-0ubuntu119.4-56-g06e324ff-0ubuntu120.1-0ubuntu120.1-5-g67c8e53c-0ubuntu120.1-9-g1f860e5a-0ubuntu120.1-10-g71af48df-0ubuntu120.1-10-g71af48df-0ubuntu220.1-10-g71af48df-0ubuntu320.1-10-g71af48df-0ubuntu520.2-45-g5f7825e2-0ubuntu1~20.04.120.3-2-g371b392c-0ubuntu1~20.04.120.4-0ubuntu1~20.04.120.4-0ubuntu1~20.04.220.4.1-0ubuntu1~20.04.121.1-19-gbad84ad4-0ubuntu1~20.04.121.1-19-gbad84ad4-0ubuntu1~20.04.221.2-3-g899bfaa9-0ubuntu2~20.04.121.3-1-g6803368d-0ubuntu1~20.04.321.3-1-g6803368d-0ubuntu1~20.04.421.4-0ubuntu1~20.04.122.1-14-g2e17a0d6-0ubuntu1~20.04.222.1-14-g2e17a0d6-0ubuntu1~20.04.322.2-0ubuntu1~20.04.122.2-0ubuntu1~20.04.222.2-0ubuntu1~20.04.322.3.4-0ubuntu1~20.04.122.4.2-0ubuntu0~20.04.122.4.2-0ubuntu0~20.04.223.1.1-0ubuntu0~20.04.123.1.2-0ubuntu0~20.04.123.1.2-0ubuntu0~20.04.223.2.1-0ubuntu0~20.04.223.2.2-0ubuntu0~20.04.123.3.1-0ubuntu1~20.04.123.3.3-0ubuntu0~20.04.123.4.3-0ubuntu0~20.04.123.4.4-0ubuntu0~20.04.124.1.3-0ubuntu1~20.04.124.1.3-0ubuntu1~20.04.4 |
None known |
subiquityUbuntu:20.04:LTS |
All versions, plus listed versions 19.08.1.419.12.1.119.12.1.1+git71gea8d463f19.12.2+git106g3d9374ad20.03.3+git107gb7ae4d0620.03.3+git147gb34aeda020.04.1+git45g5f9fae1920.04.1+git45g5f9fae19ubuntu0.1 |
None known |
cloud-initUbuntu:22.04:LTS |
All versions, plus listed versions 21.3-1-g6803368d-0ubuntu321.4-0ubuntu1~22.04.121.4-25-g039c40f9-0ubuntu1~22.04.121.4-119-gdeb3ae82-0ubuntu1~22.04.121.4-119-gdeb3ae82-0ubuntu1~22.04.2 Show 33 moreShow less22.1-1-gb3d9acdd-0ubuntu1~22.04.122.1-14-g2e17a0d6-0ubuntu1~22.04.122.1-14-g2e17a0d6-0ubuntu1~22.04.222.1-14-g2e17a0d6-0ubuntu1~22.04.322.1-14-g2e17a0d6-0ubuntu1~22.04.422.1-14-g2e17a0d6-0ubuntu1~22.04.522.2-0ubuntu1~22.04.122.2-0ubuntu1~22.04.222.2-0ubuntu1~22.04.322.3.4-0ubuntu1~22.04.122.4.2-0ubuntu0~22.04.123.1.1-0ubuntu0~22.04.123.1.2-0ubuntu0~22.04.123.2.1-0ubuntu0~22.04.123.2.2-0ubuntu0~22.04.123.3.1-0ubuntu1~22.04.123.3.3-0ubuntu0~22.04.123.4.3-0ubuntu0~22.04.123.4.4-0ubuntu0~22.04.124.1.3-0ubuntu1~22.04.124.1.3-0ubuntu1~22.04.424.1.3-0ubuntu1~22.04.524.2-0ubuntu1~22.04.124.3.1-0ubuntu0~22.04.124.4-0ubuntu1~22.04.124.4.1-0ubuntu0~22.04.124.4.1-0ubuntu0~22.04.225.1.2-0ubuntu0~22.04.125.1.2-0ubuntu0~22.04.225.1.4-0ubuntu0~22.04.125.2-0ubuntu1~22.04.125.3-0ubuntu1~22.04.126.1-0ubuntu1~22.04.1 |
None known |
subiquityUbuntu:22.04:LTS |
All versions, plus listed versions 20.04.3+git84g6a5e36ed |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | karthikparambil/lxd2root | 2025-11-07 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-5536 is a medium vulnerability (CVSS 5.0) in Canonical Ubuntu Server, published December 11, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. No source names a fixed version.
References
discourse.ubuntu.com/t/easy-multi-user-lxd-setup/26215/4
ubuntu.com/security/CVE-2023-5536
bugs.launchpad.net/ubuntu/+source/lxd/+bug/1829071
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5536
nvd.nist.gov/vuln/detail/CVE-2023-5536
github.com/advisories/GHSA-7w5c-q3c8-5c62
cve.org/CVERecord?id=CVE-2023-5536
This page doesn't list everything
Left out here: 24 versions. The JSON record has them.