---
title: "CVE-2014-3204\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2014-3204?format=md
keywords: index, follow
---

# CVE-2014-3204

Publication date 6 May 2014

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle
keyboard shortcuts, which allows physically proximate attackers to bypass
the lock screen and execute arbitrary commands, as demonstrated by
right-clicking on the indicator bar and then pressing the ALT and F2 keys.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| unity | 14.04 LTS trusty | Fixed 7.2.0+14.04.20140423-0ubuntu1.1 |
| 13.10 saucy | Not affected |
| 12.10 quantal | Not affected |
| 12.04 LTS precise | Not affected |
| 10.04 LTS lucid | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3204)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2014-3204)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2014-3204)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2014-3204)

### Other references

* <http://www.openwall.com/lists/oss-security/2014/05/03/1>
* <http://www.openwall.com/lists/oss-security/2014/04/29/2>
* <https://www.cve.org/CVERecord?id=CVE-2014-3204>
