{"id":"DEBIAN-CVE-2025-32898","details":"The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59.","modified":"2026-09-26T08:47:40.649633133Z","published":"2025-12-05T05:16:58.480Z","upstream":["CVE-2025-32898"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2025-32898"}],"affected":[{"package":{"name":"gnome-shell-extension-gsconnect","ecosystem":"Debian:12","purl":"pkg:deb/debian/gnome-shell-extension-gsconnect?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["54-2","55-1","55-2","55-3","55-4","56-1","57-1","57-2","57-3","58-1","58-2","58-3","62-1","67-1","67-2","71-1","72-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json"}},{"package":{"name":"gnome-shell-extension-gsconnect","ecosystem":"Debian:13","purl":"pkg:deb/debian/gnome-shell-extension-gsconnect?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"62-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json"}},{"package":{"name":"gnome-shell-extension-gsconnect","ecosystem":"Debian:14","purl":"pkg:deb/debian/gnome-shell-extension-gsconnect?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"62-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json"}},{"package":{"name":"kdeconnect","ecosystem":"Debian:12","purl":"pkg:deb/debian/kdeconnect?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.12.3-1","23.08.2-1","23.08.5-1","24.08.2-1","24.08.3-1","24.08.3-2","24.12.0-1","25.04.0+git20250504.28fb9142-1","25.04.0-1","25.04.2-1","25.08.1-1","25.11.80+git20251121.7090b106-1","25.12.3-1","26.04.0-1","26.04.3-1","26.04.3-2"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json"}},{"package":{"name":"kdeconnect","ecosystem":"Debian:13","purl":"pkg:deb/debian/kdeconnect?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.04.0-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json"}},{"package":{"name":"kdeconnect","ecosystem":"Debian:14","purl":"pkg:deb/debian/kdeconnect?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.04.0-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"}]}