High severity7.8NVD Advisory· Published Feb 24, 2022· Updated Jun 17, 2026
CVE-2019-25058
CVE-2019-25058
Description
An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
- USBGuard/USBGuarddescription
- osv-coords6 versionspkg:rpm/almalinux/usbguardpkg:rpm/almalinux/usbguard-dbuspkg:rpm/almalinux/usbguard-notifierpkg:rpm/almalinux/usbguard-selinuxpkg:rpm/almalinux/usbguard-toolspkg:rpm/opensuse/usbguard&distro=openSUSE%20Tumbleweed
< 1.0.0-8.el8_7.2+ 5 more
- (no CPE)range: < 1.0.0-8.el8_7.2
- (no CPE)range: < 1.0.0-8.el8_7.2
- (no CPE)range: < 1.0.0-8.el8_7.2
- (no CPE)range: < 1.0.0-8.el8_7.2
- (no CPE)range: < 1.0.0-8.el8_7.2
- (no CPE)range: < 1.1.0-1.1
Patches
Vulnerability mechanics
References
7- github.com/USBGuard/usbguard/pull/531nvdIssue TrackingPatchThird Party Advisory
- github.com/USBGuard/usbguard/issues/273nvdExploitIssue TrackingThird Party Advisory
- github.com/USBGuard/usbguard/issues/403nvdIssue TrackingThird Party Advisory
- lists.debian.org/debian-lts-announce/2022/04/msg00010.htmlnvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B2ET6DU4IA64M6TMQ4X3SG2L6TRPLDN6/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3HQVTHHJFQLSWSXA7W3ZHRF72YMPI46/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4QO5J5YEWVX27QXYOGL3BDRV3KXNRQI/nvd
News mentions
0No linked articles in our index yet.