Skip to content
OpenAdvisories
High · 7.3 CVE-2015-7946 EUVD-2015-7843GHSA-8x99-rqcq-6fvg

MTP service exposed during emergency dialer

Published May 7, 2020 · Updated Sep 16, 2024 · Assigned by canonical

Description

Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1.

Affected products

VendorProductAffectedFixed
Canonical unity8 (Ubuntu) 8.11 – < 8.11+16.04.20160111.1-0ubuntu1 8.11+16.04.20160111.1-0ubuntu1

References