Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 14.04 LTS: USN-2303-1 Moderate: Unity Lock Screen Bypass

ubuntu
Calendar Grey July 31, 2014
Scroller Ubuntu
A security flaw in the Unity lock screen on Ubuntu 14.04 LTS permits local users to circumvent protective mechanisms.
The Unity lock screen could possibly be bypassed in certain circumstances.

Summary

The Unity lock screen could possibly be bypassed in certain circumstances.

Software Description:

- unity: Interface designed for efficiency of space and interaction.

Details:

It was discovered that in certain circumstances Unity failed to

successfully grab the keyboard when switching to the lock screen. A local

attacker could possibly use this issue to run commands, and unlock the

current session.

Topics%20covered

Topics Covered

security advisory moderate local access ubuntu unity lock screen

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  unity                           7.2.2+14.04.20140714-0ubuntu1.1

After a standard system update you need to restart your session to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-2303-1

https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1349128

July 31, 2014

Topics%20covered

Topics Covered

security advisory moderate local access ubuntu unity lock screen

Package Information

https://launchpad.net/ubuntu/+source/unity/7.2.2+14.04.20140714-0ubuntu1.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.