Improper input validation in Canonical Ubuntu Linux

CVE-2015-1319

The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a USB thumb drive.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.004 (29.1th percentile) — read the EPSS interpretation.

Affected products

Canonical Ubuntu_linux — versions 14.04, 15.04
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory, Patch, Vendor Advisory)
security@ubuntu.com (x_refsource_CONFIRM, Third Party Advisory)