CVE-2019-25058

Опубликовано: 24 фев. 2022

Источник: nvd

CVSS3: 7.8

CVSS2: 4.4

EPSS Низкий

Описание

An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future.

Ссылки

https://github.com/USBGuard/usbguard/issues/273
Exploit
Issue Tracking
Third Party Advisory
https://github.com/USBGuard/usbguard/issues/403
Issue Tracking
Third Party Advisory
https://github.com/USBGuard/usbguard/pull/531
Issue Tracking
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/04/msg00010.html
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B2ET6DU4IA64M6TMQ4X3SG2L6TRPLDN6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3HQVTHHJFQLSWSXA7W3ZHRF72YMPI46/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4QO5J5YEWVX27QXYOGL3BDRV3KXNRQI/
https://github.com/USBGuard/usbguard/issues/273
Exploit
Issue Tracking
Third Party Advisory
https://github.com/USBGuard/usbguard/issues/403
Issue Tracking
Third Party Advisory
https://github.com/USBGuard/usbguard/pull/531
Issue Tracking
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/04/msg00010.html
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B2ET6DU4IA64M6TMQ4X3SG2L6TRPLDN6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3HQVTHHJFQLSWSXA7W3ZHRF72YMPI46/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4QO5J5YEWVX27QXYOGL3BDRV3KXNRQI/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:usbguard_project:usbguard:*:*:*:*:*:*:*:*

Версия до 1.1.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 6%

0.00027

Низкий

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-863

Связанные уязвимости

CVE-2019-25058

CVSS3: 7.8

ubuntu

больше 3 лет назад

An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future.

CVE-2019-25058

CVSS3: 7.8

redhat

больше 3 лет назад

An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future.

CVE-2019-25058

CVSS3: 7.8

debian

больше 3 лет назад

An issue was discovered in USBGuard before 1.1.0. On systems with the ...

RLSA-2023:0303

rocky

больше 2 лет назад

Moderate: usbguard security update

RLSA-2023:0087

rocky

больше 2 лет назад

Moderate: usbguard security update

EPSS

Процентиль: 6%

0.00027

Низкий

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-863