CVE-2014-5195

Publication date 7 August 2014

Last updated 24 July 2024


Ubuntu priority

Description

Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.

Status

Package Ubuntu Release Status
unity 14.04 LTS trusty
Fixed 7.2.2+14.04.20140714-0ubuntu1.1
12.04 LTS precise
Not affected
10.04 LTS lucid Not in release