What’s Vulnerable › Vulnerabilities

CVE-2019-25058

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-02-24 · updated 2026-06-17
• Weakness: CWE-863

Description

An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future.

Affected products

• Debian Linux: 9.0
• Fedoraproject Fedora: 34, 35, 36
• Usbguard Project Usbguard: before 1.1.0 — fixed in 1.1.0

How to fix

Upgrade to a fixed version: Usbguard Project Usbguard 1.1.0. Check the vendor advisory for mitigations.

References

• https://github.com/USBGuard/usbguard/issues/273
• https://github.com/USBGuard/usbguard/issues/403
• https://github.com/USBGuard/usbguard/pull/531
• https://lists.debian.org/debian-lts-announce/2022/04/msg00010.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B2ET6DU4IA64M6TMQ4X3SG2L6TRPLDN6/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3HQVTHHJFQLSWSXA7W3ZHRF72YMPI46/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4QO5J5YEWVX27QXYOGL3BDRV3KXNRQI/
• https://github.com/USBGuard/usbguard/issues/273
• https://github.com/USBGuard/usbguard/issues/403
• https://github.com/USBGuard/usbguard/pull/531
• https://lists.debian.org/debian-lts-announce/2022/04/msg00010.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B2ET6DU4IA64M6TMQ4X3SG2L6TRPLDN6/

Get alerted when CVE-2019-25058 or the next vulnerability affects your stack