Lucene search

[email protected]CVE-2014-3203

HistoryMay 06, 2014 - 2:55 p.m.

CVE-2014-3203

2014-05-0614:55:06

CWE-264

[email protected]

web.nvd.nist.gov

unity

ubuntu

access restriction

lock screen bypass

cve-2014-3203

nvd

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.0%

JSON

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks.

Affected configurations

NVD

Node

ayatana_projectunityRange≤7.2.0

ayatana_projectunityMatch7.0.0

ayatana_projectunityMatch7.0.1

ayatana_projectunityMatch7.1.0

ayatana_projectunityMatch7.1.1

ayatana_projectunityMatch7.1.2

ayatana_projectunityMatch7.1.3

canonicalubuntu_linuxMatch14.04lts

CPENameOperatorVersion
ayatana_project:unityayatana project unityle7.2.0
ayatana_project:unityayatana project unityeq7.0.0
ayatana_project:unityayatana project unityeq7.0.1
ayatana_project:unityayatana project unityeq7.1.0
ayatana_project:unityayatana project unityeq7.1.1
ayatana_project:unityayatana project unityeq7.1.2
ayatana_project:unityayatana project unityeq7.1.3
canonical:ubuntu_linuxcanonical ubuntu linuxeq14.04

CPE	Name	Operator	Version
ayatana_project:unity	ayatana project unity	le	7.2.0
ayatana_project:unity	ayatana project unity	eq	7.0.0
ayatana_project:unity	ayatana project unity	eq	7.0.1
ayatana_project:unity	ayatana project unity	eq	7.1.0
ayatana_project:unity	ayatana project unity	eq	7.1.1
ayatana_project:unity	ayatana project unity	eq	7.1.2
ayatana_project:unity	ayatana project unity	eq	7.1.3
canonical:ubuntu_linux	canonical ubuntu linux	eq	14.04

References

ubuntu.com/usn/usn-2184-1

www.openwall.com/lists/oss-security/2014/04/29/2

www.openwall.com/lists/oss-security/2014/05/03/1

bugs.launchpad.net/ubuntu/+source/unity/+bug/1308850

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.0%

JSON

Related for CVE-2014-3203

prion1 nvd1 ubuntucve1 cvelist1