CVE-2019-25058

Description

An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.03

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2023:0087) usbguard security update usbguard-1.0.0-8.el8_7.2.i686.rpmLinux
(RHSA-2023:0087) usbguard security update usbguard-1.0.0-8.el8_7.2.x86_64.rpmLinux
(RHSA-2023:0087) usbguard security update usbguard-dbus-1.0.0-8.el8_7.2.x86_64.rpmLinux
(RHSA-2023:0087) usbguard security update usbguard-debugsource-1.0.0-8.el8_7.2.i686.rpmLinux
(RHSA-2023:0087) usbguard security update usbguard-debugsource-1.0.0-8.el8_7.2.x86_64.rpmLinux
(RHSA-2023:0087) usbguard security update usbguard-notifier-1.0.0-8.el8_7.2.x86_64.rpmLinux
(RHSA-2023:0087) usbguard security update usbguard-selinux-1.0.0-8.el8_7.2.noarch.rpmLinux
(RHSA-2023:0087) usbguard security update usbguard-tools-1.0.0-8.el8_7.2.x86_64.rpmLinux
Usbguard update (ELSA-2023-0087) usbguard-1.0.0-8.el8_7.2.i686.rpmLinux
Usbguard update (ELSA-2023-0087) usbguard-1.0.0-8.el8_7.2.x86_64.rpmLinux
Usbguard-dbus update (ELSA-2023-0087) usbguard-dbus-1.0.0-8.el8_7.2.x86_64.rpmLinux
Usbguard-notifier update (ELSA-2023-0087) usbguard-notifier-1.0.0-8.el8_7.2.x86_64.rpmLinux
Usbguard-selinux update (ELSA-2023-0087) usbguard-selinux-1.0.0-8.el8_7.2.noarch.rpmLinux
Usbguard-tools update (ELSA-2023-0087) usbguard-tools-1.0.0-8.el8_7.2.x86_64.rpmLinux
Usbguard update (ELSA-2023-0303) usbguard-1.0.0-10.el9_1.2.i686.rpmLinux
Usbguard update (ELSA-2023-0303) usbguard-1.0.0-10.el9_1.2.x86_64.rpmLinux
Usbguard-dbus update (ELSA-2023-0303) usbguard-dbus-1.0.0-10.el9_1.2.x86_64.rpmLinux
Usbguard-notifier update (ELSA-2023-0303) usbguard-notifier-1.0.0-10.el9_1.2.x86_64.rpmLinux
Usbguard-selinux update (ELSA-2023-0303) usbguard-selinux-1.0.0-10.el9_1.2.noarch.rpmLinux
Usbguard-tools update (ELSA-2023-0303) usbguard-tools-1.0.0-10.el9_1.2.x86_64.rpmLinux
(RHSA-2023:0303) usbguard security update usbguard-1.0.0-10.el9_1.2.i686.rpmLinux
(RHSA-2023:0303) usbguard security update usbguard-1.0.0-10.el9_1.2.x86_64.rpmLinux
(RHSA-2023:0303) usbguard security update usbguard-dbus-1.0.0-10.el9_1.2.x86_64.rpmLinux
(RHSA-2023:0303) usbguard security update usbguard-debugsource-1.0.0-10.el9_1.2.i686.rpmLinux
(RHSA-2023:0303) usbguard security update usbguard-debugsource-1.0.0-10.el9_1.2.x86_64.rpmLinux
(RHSA-2023:0303) usbguard security update usbguard-notifier-1.0.0-10.el9_1.2.x86_64.rpmLinux
(RHSA-2023:0303) usbguard security update usbguard-selinux-1.0.0-10.el9_1.2.noarch.rpmLinux
(RHSA-2023:0303) usbguard security update usbguard-tools-1.0.0-10.el9_1.2.x86_64.rpmLinux
usbguard security update (RLSA-2023:0303) usbguard-1.0.0-10.el9_1.2.i686.rpmLinux
usbguard security update (RLSA-2023:0303) usbguard-1.0.0-10.el9_1.2.x86_64.rpmLinux
usbguard security update (RLSA-2023:0303) usbguard-dbus-1.0.0-10.el9_1.2.x86_64.rpmLinux
usbguard security update (RLSA-2023:0303) usbguard-tools-1.0.0-10.el9_1.2.x86_64.rpmLinux
usbguard security update (RLSA-2023:0303) usbguard-selinux-1.0.0-10.el9_1.2.noarch.rpmLinux
usbguard security update (RLSA-2023:0303) usbguard-notifier-1.0.0-10.el9_1.2.x86_64.rpmLinux
(RHSA-2023:0087)Moderate: security update usbguard-dbus-debuginfo-1.0.0-8.el8_7.2.i686.rpmLinux
(RHSA-2023:0087)Moderate: security update usbguard-dbus-debuginfo-1.0.0-8.el8_7.2.x86_64.rpmLinux
(RHSA-2023:0087)Moderate: security update usbguard-debuginfo-1.0.0-8.el8_7.2.i686.rpmLinux
(RHSA-2023:0087)Moderate: security update usbguard-debuginfo-1.0.0-8.el8_7.2.x86_64.rpmLinux
(RHSA-2023:0087)Moderate: security update usbguard-notifier-debuginfo-1.0.0-8.el8_7.2.i686.rpmLinux
(RHSA-2023:0087)Moderate: security update usbguard-notifier-debuginfo-1.0.0-8.el8_7.2.x86_64.rpmLinux
(RHSA-2023:0087)Moderate: security update usbguard-tools-debuginfo-1.0.0-8.el8_7.2.i686.rpmLinux
(RHSA-2023:0087)Moderate: security update usbguard-tools-debuginfo-1.0.0-8.el8_7.2.x86_64.rpmLinux
Moderate: usbguard security update usbguard-1.0.0-8.el8_7.2.i686.rpmLinux
Moderate: usbguard security update usbguard-1.0.0-10.el9_1.2.i686.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234