This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-25058 →

DEBIAN-CVE-2019-25058

An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all...

Original description

The description as published by the source.

An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 usbguard

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0+ds-2"}]}]

Debian:13 usbguard

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0+ds-2"}]}]

Debian:14 usbguard

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0+ds-2"}]}]

References

advisory security-tracker.debian.org