PT-2015-5208 · Canonical · Unity Settings Daemon+1

Marc Deslauriers + 1 · Publicado 2015-04-03 · Atualizado 2019-02-04 · CVE-2015-1319

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Unity Settings Daemon versions prior to 14.04.0+14.04.20150825-0ubuntu2 Unity Settings Daemon versions 15.04.x prior to 15.04.1+15.04.20150408-0ubuntu1.2

Description The issue allows physically proximate attackers to mount removable media while the screen is locked, as demonstrated by inserting a USB thumb drive, due to the Unity Settings Daemon not properly detecting if the screen is locked.

Recommendations For Unity Settings Daemon versions prior to 14.04.0+14.04.20150825-0ubuntu2, update to version 14.04.0+14.04.20150825-0ubuntu2 or later. For Unity Settings Daemon versions 15.04.x prior to 15.04.1+15.04.20150408-0ubuntu1.2, update to version 15.04.1+15.04.20150408-0ubuntu1.2 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-1319

USN-2741-1

Produtos afetados

Ubuntu

Unity Settings Daemon

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2015-1319 · Nota de Segurança
• https://bugs.launchpad.net/ubuntu/%2Bsource/unity/%2Bbug/1438870 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1319 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-1319 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-1319 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-2741-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-2741-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-2741-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2015-1319 · Nota de Segurança