{"id":"CVE-2023-5616","aliases":["DEBIAN-CVE-2023-5616","EUVD-2023-57909","GHSA-78gq-q74g-w632","UBUNTU-CVE-2023-5616","USN-6554-1"],"status":"published","title":"In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system...","description":"In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00236,"percentile":0.14744,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-290"],"published":"2023-12-13T00:00:00Z","modified":"2026-10-26T18:02:57Z","fixes":[{"ecosystem":"Ubuntu:20.04:LTS","package":"gnome-control-center","fixed_in":["1:3.36.5-0ubuntu4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gnome-control-center","fixed_in":["1:41.7-0ubuntu0.22.04.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"gnome-control-center","fixed_in":["1:45.0-1ubuntu4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gnome-control-center","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:43.4.1-1","1:43.6-1","1:43.6-2","1:43.6-2~deb12u1","1:44.0-1","1:44.1-1","1:44.2-1","1:44.2-2","1:44.3-1","1:44.3-2","1:44.3-3","1:44~beta-1","1:44~rc-1","1:45.0-1","1:45.0-2","1:45.1-1","1:45.2-1","1:45~beta-1","1:45~rc-1","1:45~rc-2","1:46.0.1-1","1:46.1-1","1:46.1-2","1:46.3-1","1:46.4-1","1:46~alpha-1","1:46~alpha-2","1:46~beta-1","1:46~beta-2","1:47.0.1-1","1:47.0.1-2","1:47.1-1","1:47.1.1-1","1:47.1.1-2","1:47.1.1-3","1:47.2-1","1:47.2-2","1:47.2-3","1:47.2-4","1:47.3-1","1:47~beta-2","1:47~rc-1","1:48.0-1","1:48.1-1","1:48.1-2","1:48.2-1","1:48.2-2","1:48.3-1","1:48.3-2","1:48.3-3","1:48.4-1","1:48.4-1~deb13u1","1:48~beta-1","1:48~beta-2","1:48~rc.1-1","1:49.0-1","1:49.1-1","1:49.1-2","1:49.2-1","1:49.2.1-1","1:49.2.2-1","1:49.3-1","1:49.4-1","1:49~beta-1","1:50.0-1","1:50.1-1","1:50.3-1","1:50~beta-1","1:51.0-1","1:51.1-1","1:51~beta-1","1:51~rc.1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"gnome-control-center","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:48.3-3","1:48.4-1","1:48.4-1~deb13u1","1:49.0-1","1:49.1-1","1:49.1-2","1:49.2-1","1:49.2.1-1","1:49.2.2-1","1:49.3-1","1:49.4-1","1:49~beta-1","1:50.0-1","1:50.1-1","1:50.3-1","1:50~beta-1","1:51.0-1","1:51.1-1","1:51~beta-1","1:51~rc.1-1"]},{"source":"osv","ecosystem":"Debian:14","package":"gnome-control-center","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:48.3-3","1:48.4-1","1:48.4-1~deb13u1","1:49.0-1","1:49.1-1","1:49.1-2","1:49.2-1","1:49.2.1-1","1:49.2.2-1","1:49.3-1","1:49.4-1","1:49~beta-1","1:50.0-1","1:50.1-1","1:50.3-1","1:50~beta-1","1:51.0-1","1:51.1-1","1:51~beta-1","1:51~rc.1-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gnome-control-center","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.16.3-0ubuntu1","1:3.16.3-0ubuntu3","1:3.18.1-1ubuntu1","1:3.18.2-1ubuntu1","1:3.18.2-1ubuntu2","1:3.18.2-1ubuntu3","1:3.18.2-1ubuntu4","1:3.18.2-1ubuntu5","1:3.18.2-1ubuntu6","1:3.18.2-1ubuntu6.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gnome-control-center","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.26.1-0ubuntu4","1:3.26.1-0ubuntu5","1:3.26.1-0ubuntu6","1:3.26.1-0ubuntu7","1:3.26.2-0ubuntu1","1:3.26.2-0ubuntu2","1:3.26.2-0ubuntu3","1:3.26.2-0ubuntu5","1:3.27.92-1ubuntu1","1:3.28.0-0ubuntu1","1:3.28.0-0ubuntu2","1:3.28.0-0ubuntu3","1:3.28.0-0ubuntu4","1:3.28.0-0ubuntu5","1:3.28.0-0ubuntu6","1:3.28.1-0ubuntu1","1:3.28.1-0ubuntu1.18.04.1","1:3.28.1-0ubuntu1.18.04.2","1:3.28.2-0ubuntu0.18.04.1","1:3.28.2-0ubuntu0.18.04.2","1:3.28.2-0ubuntu0.18.04.3","1:3.28.2-0ubuntu0.18.04.4","1:3.28.2-0ubuntu0.18.04.5","1:3.28.2-0ubuntu0.18.04.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gnome-control-center","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.36.5-0ubuntu4.1"}]}],"versions":["1:3.34.1-1ubuntu2","1:3.34.1-1ubuntu3","1:3.35.90-0ubuntu1","1:3.35.91-0ubuntu1","1:3.35.91-0ubuntu2","1:3.35.91-0ubuntu3","1:3.35.92-1ubuntu1","1:3.36.0-0ubuntu2","1:3.36.0-0ubuntu3","1:3.36.1-1ubuntu1","1:3.36.1-1ubuntu2","1:3.36.1-1ubuntu3","1:3.36.1-1ubuntu4","1:3.36.1-1ubuntu5","1:3.36.2-0ubuntu1","1:3.36.3-0ubuntu1","1:3.36.4-0ubuntu1","1:3.36.4-0ubuntu2","1:3.36.5-0ubuntu1","1:3.36.5-0ubuntu2","1:3.36.5-0ubuntu3","1:3.36.5-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnome-control-center","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:41.7-0ubuntu0.22.04.8"}]}],"versions":["1:40.0-1ubuntu5","1:41.1-1ubuntu1","1:41.1-1ubuntu2","1:41.1-1ubuntu3","1:41.2-2ubuntu1","1:41.4-1ubuntu2","1:41.4-1ubuntu3","1:41.4-1ubuntu3.1","1:41.4-1ubuntu6","1:41.4-1ubuntu8","1:41.4-1ubuntu9","1:41.4-1ubuntu10","1:41.4-1ubuntu11","1:41.4-1ubuntu12","1:41.4-1ubuntu13","1:41.4-1ubuntu13.2","1:41.7-0ubuntu0.22.04.1","1:41.7-0ubuntu0.22.04.4","1:41.7-0ubuntu0.22.04.5","1:41.7-0ubuntu0.22.04.6","1:41.7-0ubuntu0.22.04.7"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gnome-control-center","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:45.0-1ubuntu4"}]}],"versions":["1:45.0-1ubuntu2","1:45.0-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gnome-control-center","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.36.5-0ubuntu4.1"}]}],"versions":["1:3.34.1-1ubuntu2","1:3.34.1-1ubuntu3","1:3.35.90-0ubuntu1","1:3.35.91-0ubuntu1","1:3.35.91-0ubuntu2","1:3.35.91-0ubuntu3","1:3.35.92-1ubuntu1","1:3.36.0-0ubuntu2","1:3.36.0-0ubuntu3","1:3.36.1-1ubuntu1","1:3.36.1-1ubuntu2","1:3.36.1-1ubuntu3","1:3.36.1-1ubuntu4","1:3.36.1-1ubuntu5","1:3.36.2-0ubuntu1","1:3.36.3-0ubuntu1","1:3.36.4-0ubuntu1","1:3.36.4-0ubuntu2","1:3.36.5-0ubuntu1","1:3.36.5-0ubuntu2","1:3.36.5-0ubuntu3","1:3.36.5-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnome-control-center","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:41.7-0ubuntu0.22.04.8"}]}],"versions":["1:40.0-1ubuntu5","1:41.1-1ubuntu1","1:41.1-1ubuntu2","1:41.1-1ubuntu3","1:41.2-2ubuntu1","1:41.4-1ubuntu2","1:41.4-1ubuntu3","1:41.4-1ubuntu3.1","1:41.4-1ubuntu6","1:41.4-1ubuntu8","1:41.4-1ubuntu9","1:41.4-1ubuntu10","1:41.4-1ubuntu11","1:41.4-1ubuntu12","1:41.4-1ubuntu13","1:41.4-1ubuntu13.2","1:41.7-0ubuntu0.22.04.1","1:41.7-0ubuntu0.22.04.4","1:41.7-0ubuntu0.22.04.5","1:41.7-0ubuntu0.22.04.6","1:41.7-0ubuntu0.22.04.7"]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"canonical ltd.","product":"ubuntu's gnome-control-center"},{"vendor":"gnome","product":"control_center"}],"references":[{"url":"https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/2039577","tags":["issue-tracking","Exploit","Issue Tracking","report"]},{"url":"https://ubuntu.com/security/notices/USN-6554-1","tags":["vendor-advisory","Vendor Advisory","advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-5616","tags":["issue-tracking","Vendor Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5616"},{"url":"https://github.com/advisories/GHSA-78gq-q74g-w632"},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-5616","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5616","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-5616","description":"In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.","status":"published","published":"2025-04-15T18:29:54.565Z","modified":"2025-04-15T20:51:31.399Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:35:16.771348Z"}],"euvd":[{"id":"EUVD-2023-57909","description":"In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.","status":"published","published":"2025-04-15T18:29:54Z","modified":"2025-04-15T20:51:31Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:52:25.86191Z"}],"ghsa":[{"id":"GHSA-78gq-q74g-w632","title":"In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system...","description":"In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.","status":"published","published":"2025-04-15T21:31:43Z","modified":"2025-04-15T21:31:48Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T15:01:33.833824Z"}],"nvd":[{"id":"CVE-2023-5616","description":"In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.","status":"published","published":"2025-04-15T19:16:06.647Z","modified":"2026-06-17T06:48:56.98Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:09:21.774456Z"}],"osv":[{"id":"CVE-2023-5616","description":"In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.","status":"published","published":"2025-04-15T19:16:06.647Z","modified":"2026-04-10T05:07:09.249378Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:36.851042Z"},{"id":"DEBIAN-CVE-2023-5616","description":"In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.","status":"published","published":"2025-04-15T19:16:06.647Z","modified":"2026-10-26T18:02:57.046221756Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:41.533064Z"},{"id":"UBUNTU-CVE-2023-5616","description":"In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.","status":"published","published":"2023-12-13T00:00:00Z","modified":"2026-04-22T14:34:06.942668Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T16:54:41.555387Z"},{"id":"USN-6554-1","title":"gnome-control-center vulnerability","description":"Zygmunt Krynicki discovered that GNOME Settings did not accurately reflect\nthe SSH remote login status when the system was configured to use systemd\nsocket activation for OpenSSH. Remote SSH access may be unknowingly\nenabled, contrary to expectation.\n","status":"published","published":"2023-12-13T02:21:14Z","modified":"2026-04-27T17:00:17.918742Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}