DEBIAN-CVE-2025-32900

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2025-32900

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32900.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2025-32900

Upstream

CVE-2025-32900

Published

2025-12-05T06:16:08Z

Modified

2026-09-01T20:05:46Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator

Summary

[none]

Details

In the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily change the displayed information about a device, because broadcast UDP is used. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59.

References

https://security-tracker.debian.org/tracker/CVE-2025-32900

Affected packages

Debian:12

gnome-shell-extension-gsconnect

Package

Name: gnome-shell-extension-gsconnect
Purl: pkg:deb/debian/gnome-shell-extension-gsconnect?arch=source&distro=bookworm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

Other

54-2

55-1

55-2

55-3

55-4

56-1

57-1

57-2

57-3

58-1

58-2

58-3

62-1

67-1

67-2

71-1

72-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32900.json"

kdeconnect

Package

Name: kdeconnect
Purl: pkg:deb/debian/kdeconnect?arch=source&distro=bookworm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

22.*

22.12.3-1

23.*

23.08.2-1

23.08.5-1

24.*

24.08.2-1

24.08.3-1

24.08.3-2

24.12.0-1

25.*

25.04.0-1

25.04.0+git20250504.28fb9142-1

25.04.2-1

25.08.1-1

25.11.80+git20251121.7090b106-1

25.12.3-1

26.*

26.04.0-1

26.04.3-1

26.04.3-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32900.json"

Debian:13

gnome-shell-extension-gsconnect

Package

Name: gnome-shell-extension-gsconnect
Purl: pkg:deb/debian/gnome-shell-extension-gsconnect?arch=source&distro=trixie

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

62-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32900.json"

kdeconnect

Package

Name: kdeconnect
Purl: pkg:deb/debian/kdeconnect?arch=source&distro=trixie

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

25.04.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32900.json"

Debian:14

gnome-shell-extension-gsconnect

Package

Name: gnome-shell-extension-gsconnect
Purl: pkg:deb/debian/gnome-shell-extension-gsconnect?arch=source&distro=forky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

62-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32900.json"

kdeconnect

Package

Name: kdeconnect
Purl: pkg:deb/debian/kdeconnect?arch=source&distro=forky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

25.04.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32900.json"