tocsin

Debian/usbview: high 7.8

USBView 2.1 before 2.2 allows some local users (e.g., ones logged in via SSH) to execute arbitrary code as root because certain Polkit settings (e.g., allow_any=yes) for pkexec disable the authenticat

Action: Upgrade usbview to 2.0-21-g6fe2f4f-2.1 or later.

Affected

introducedfixedlast affected
02.0-21-g6fe2f4f-2.1-

Fixed versions

2.0-21-g6fe2f4f-2.1

Sources

published · modified · JSON