Description
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | unity | 7.2.0+14.04.20140416-0ubuntu1 | — |
References
- [oss-security] 20140429 Re: Ubuntu 14.04: security problem in the lock screen mailing-list
- [oss-security] 20140503 Re: Ubuntu 14.04: security problem in the lock screen mailing-list
- https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308572
- https://bugs.launchpad.net/unity/+bug/1308750
- [oss-security] 20140426 Ubuntu 14.04: security problem in the lock screen mailing-list
- [oss-security] 20140426 Re: Ubuntu 14.04: security problem in the lock screen mailing-list