AZL-8805
Dashboard / Vulnerabilities / AZL-8805
Summary: CVE-2019-25058 affecting package usbguard for versions less than 1.1.0-1
Details: An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future.
References: https://nvd.nist.gov/vuln/detail/CVE-2019-25058
Affected packages
Package
Name: usbguard
Purl: pkg:rpm/azure-linux/usbguard
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -1.1.0-1
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
