CVE-2019-25058

    Dashboard / Vulnerabilities / CVE-2019-25058

    CVE-2019-25058

    Published: 24 Feb 2022Last Modified: 8 Jul 2026

    Summary:

    Details: An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future.

    References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B2ET6DU4IA64M6TMQ4X3SG2L6TRPLDN6/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3HQVTHHJFQLSWSXA7W3ZHRF72YMPI46/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4QO5J5YEWVX27QXYOGL3BDRV3KXNRQI/, https://lists.debian.org/debian-lts-announce/2022/04/msg00010.html, https://github.com/USBGuard/usbguard/issues/273, https://github.com/USBGuard/usbguard/issues/403, https://github.com/USBGuard/usbguard/pull/531

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -8605c1071f46f83bbbf5461e6e5c4f477e9bdc1a

    Affected versions

    usbguard-1.0.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2019-25058 | CVE-DB