CVE-2014-5195 Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the....
HighCVSS 7.2
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ayatana project unity | <= 7.2.2 | No fix listed |
| ayatana project unity | = 7.2.0 | No fix listed |
| ayatana project unity | = 7.2.1 | No fix listed |
| ayatana project unity | = 7.3.0 | No fix listed |
References
- 109788 vdb-entry
- 68987 vdb-entry
- USN-2303-1 vendor-advisory
- bugs.launchpad.net
- ubuntu-unity-screenlock-sec-bypass(95199) vdb-entry