CVE-2023-5616
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system...
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.
- Record
CVE-2023-5616- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-290
- Updated
- 2026-11-02
EUVDEUVD-2023-57909
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.
- Record
EUVD-2023-57909- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-78gq-q74g-w632
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system...
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.
- Record
GHSA-78gq-q74g-w632- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-290
- Updated
- 2026-11-02
NVD
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.
- Record
CVE-2023-5616- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-290
- Updated
- 2026-11-02
OSV
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.
- Record
CVE-2023-5616- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-5616
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.
- Record
DEBIAN-CVE-2023-5616- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-5616
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.
- Record
UBUNTU-CVE-2023-5616- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVUSN-6554-1 No score
gnome-control-center vulnerability
Zygmunt Krynicki discovered that GNOME Settings did not accurately reflect the SSH remote login status when the system was configured to use systemd socket activation for OpenSSH. Remote SSH access may be unknowingly enabled, contrary to expectation.
- Record
USN-6554-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnome-control-centerDebian:12 |
All versions, plus listed versions 1:43.4.1-11:43.6-11:43.6-21:43.6-2~deb12u11:44.0-1 Show 45 moreShow less1:44.1-11:44.2-11:44.2-21:44.3-11:44.3-21:44.3-31:44~beta-11:44~rc-11:45.0-11:45.0-21:45.1-11:45.2-11:45~beta-11:45~rc-11:45~rc-21:46.0.1-11:46.1-11:46.1-21:46.3-11:46.4-11:46~alpha-11:46~alpha-21:46~beta-11:46~beta-21:47.0.1-11:47.0.1-21:47.1-11:47.1.1-11:47.1.1-21:47.1.1-31:47.2-11:47.2-21:47.2-31:47.2-41:47.3-11:47~beta-21:47~rc-11:48.0-11:48.1-11:48.1-21:48.2-11:48.2-21:48.3-11:48.3-21:48.3-3 |
None known |
gnome-control-centerDebian:13 |
All versions, plus listed versions 1:48.3-31:48.4-11:48.4-1~deb13u11:49.0-11:49.1-1 Show 15 moreShow less1:49.1-21:49.2-11:49.2.1-11:49.2.2-11:49.3-11:49.4-11:49~beta-11:50.0-11:50.1-11:50.3-11:50~beta-11:51.0-11:51.1-11:51~beta-11:51~rc.1-1 |
None known |
gnome-control-centerDebian:14 |
All versions, plus listed versions 1:48.3-31:48.4-11:48.4-1~deb13u11:49.0-11:49.1-1 Show 15 moreShow less1:49.1-21:49.2-11:49.2.1-11:49.2.2-11:49.3-11:49.4-11:49~beta-11:50.0-11:50.1-11:50.3-11:50~beta-11:51.0-11:51.1-11:51~beta-11:51~rc.1-1 |
None known |
gnome-control-centerUbuntu:16.04:LTS |
All versions, plus listed versions 1:3.16.3-0ubuntu11:3.16.3-0ubuntu31:3.18.1-1ubuntu11:3.18.2-1ubuntu11:3.18.2-1ubuntu2 Show 5 moreShow less1:3.18.2-1ubuntu31:3.18.2-1ubuntu41:3.18.2-1ubuntu51:3.18.2-1ubuntu61:3.18.2-1ubuntu6.1 |
None known |
gnome-control-centerUbuntu:18.04:LTS |
All versions, plus listed versions 1:3.26.1-0ubuntu41:3.26.1-0ubuntu51:3.26.1-0ubuntu61:3.26.1-0ubuntu71:3.26.2-0ubuntu1 Show 19 moreShow less1:3.26.2-0ubuntu21:3.26.2-0ubuntu31:3.26.2-0ubuntu51:3.27.92-1ubuntu11:3.28.0-0ubuntu11:3.28.0-0ubuntu21:3.28.0-0ubuntu31:3.28.0-0ubuntu41:3.28.0-0ubuntu51:3.28.0-0ubuntu61:3.28.1-0ubuntu11:3.28.1-0ubuntu1.18.04.11:3.28.1-0ubuntu1.18.04.21:3.28.2-0ubuntu0.18.04.11:3.28.2-0ubuntu0.18.04.21:3.28.2-0ubuntu0.18.04.31:3.28.2-0ubuntu0.18.04.41:3.28.2-0ubuntu0.18.04.51:3.28.2-0ubuntu0.18.04.6 |
None known |
gnome-control-centerUbuntu:20.04:LTS |
before 1:3.36.5-0ubuntu4.1, plus listed versions 1:3.34.1-1ubuntu21:3.34.1-1ubuntu31:3.35.90-0ubuntu11:3.35.91-0ubuntu11:3.35.91-0ubuntu2 Show 17 moreShow less1:3.35.91-0ubuntu31:3.35.92-1ubuntu11:3.36.0-0ubuntu21:3.36.0-0ubuntu31:3.36.1-1ubuntu11:3.36.1-1ubuntu21:3.36.1-1ubuntu31:3.36.1-1ubuntu41:3.36.1-1ubuntu51:3.36.2-0ubuntu11:3.36.3-0ubuntu11:3.36.4-0ubuntu11:3.36.4-0ubuntu21:3.36.5-0ubuntu11:3.36.5-0ubuntu21:3.36.5-0ubuntu31:3.36.5-0ubuntu4 |
1:3.36.5-0ubuntu4.1 |
gnome-control-centerUbuntu:22.04:LTS |
before 1:41.7-0ubuntu0.22.04.8, plus listed versions 1:40.0-1ubuntu51:41.1-1ubuntu11:41.1-1ubuntu21:41.1-1ubuntu31:41.2-2ubuntu1 Show 16 moreShow less1:41.4-1ubuntu21:41.4-1ubuntu31:41.4-1ubuntu3.11:41.4-1ubuntu61:41.4-1ubuntu81:41.4-1ubuntu91:41.4-1ubuntu101:41.4-1ubuntu111:41.4-1ubuntu121:41.4-1ubuntu131:41.4-1ubuntu13.21:41.7-0ubuntu0.22.04.11:41.7-0ubuntu0.22.04.41:41.7-0ubuntu0.22.04.51:41.7-0ubuntu0.22.04.61:41.7-0ubuntu0.22.04.7 |
1:41.7-0ubuntu0.22.04.8 |
gnome-control-centerUbuntu:24.04:LTS |
before 1:45.0-1ubuntu4, plus listed versions 1:45.0-1ubuntu21:45.0-1ubuntu3 |
1:45.0-1ubuntu4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-5616 is a medium vulnerability (CVSS 4.9) in Canonical Ubuntu Linux, published December 13, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 14th percentile. Fixed in gnome-control-center 1:3.36.5-0ubuntu4.1.
References
bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/2039577
ubuntu.com/security/notices/USN-6554-1
nvd.nist.gov/vuln/detail/CVE-2023-5616
github.com/advisories/GHSA-78gq-q74g-w632
security-tracker.debian.org/tracker/CVE-2023-5616
cve.org/CVERecord?id=CVE-2023-5616
Left out here: 22 versions. The JSON record has them.