PT-2015-5208 · Canonical · Unity Settings Daemon+1

Marc Deslauriers + 1 · Published 2015-04-03 · Updated 2019-02-04 · CVE-2015-1319

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Unity Settings Daemon versions prior to 14.04.0+14.04.20150825-0ubuntu2 Unity Settings Daemon versions 15.04.x prior to 15.04.1+15.04.20150408-0ubuntu1.2

Description The issue allows physically proximate attackers to mount removable media while the screen is locked, as demonstrated by inserting a USB thumb drive, due to the Unity Settings Daemon not properly detecting if the screen is locked.

Recommendations For Unity Settings Daemon versions prior to 14.04.0+14.04.20150825-0ubuntu2, update to version 14.04.0+14.04.20150825-0ubuntu2 or later. For Unity Settings Daemon versions 15.04.x prior to 15.04.1+15.04.20150408-0ubuntu1.2, update to version 15.04.1+15.04.20150408-0ubuntu1.2 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-1319

USN-2741-1

Affected Products

Ubuntu

Unity Settings Daemon

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2015-1319 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1319 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-1319 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1319 · Vendor Advisory
• http://ubuntu.com/usn/USN-2741-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2741-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2741-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-1319 · Security Note
• https://bugs.launchpad.net/ubuntu/%2Bsource/unity/%2Bbug/1438870 · Note