USN-2576-1
usb-creator vulnerability
No scoreFix available
Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges.
What each source reports
OSV No score
usb-creator vulnerability
Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges.
- Record
USN-2576-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
usb-creatorUbuntu:14.04:LTS |
before 0.2.56.3ubuntu0.1, plus listed versions 0.2.500.2.510.2.520.2.530.2.54 Show 5 moreShow less0.2.550.2.560.2.56.10.2.56.20.2.56.3 |
0.2.56.3ubuntu0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-2576-1 is a vulnerability with no CVSS score yet in usb-creator, published April 23, 2015. No source lists public exploit code. Fixed in usb-creator 0.2.56.3ubuntu0.1.