CVE-2023-5536

A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their privilege to root without requiring a sudo password.

Score

CVSS 3.1 6.4 Medium

Status

Modified - security@ubuntu.com

Published

2023-12-12

Last modified

2024-08-02

Weaknesses

CWE-276

Affected products

• Ubuntu Linux (Canonical)
• Ubuntu Server (Canonical)

References

• https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1829071
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5536
• https://discourse.ubuntu.com/t/easy-multi-user-lxd-setup/26215/4
• https://ubuntu.com/security/CVE-2023-5536