« Volver al listado

CVE-2014-3203

Estado: ModificadaMedia (4.4)—

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Ayatana Project — UnityCanonical — Ubuntu Linux

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3203",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.4,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security@ubuntu.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-06T14:55:06.090",
  "references": [
    {
      "url": "http://ubuntu.com/usn/usn-2184-1",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@ubuntu.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/04/29/2",
      "source": "security@ubuntu.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/03/1",
      "source": "security@ubuntu.com"
    },
    {
      "url": "https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308850",
      "tags": [
        "Exploit"
      ],
      "source": "security@ubuntu.com"
    },
    {
      "url": "http://ubuntu.com/usn/usn-2184-1",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/04/29/2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/03/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308850",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks."
    },
    {
      "lang": "es",
      "value": "Unity anterior a 7.2.1, utilizado en Ubuntu 14.04, no restringe debidamente acceso al guión cuando la pantalla de bloqueo está activada, lo que permite a atacantes físicamente próximos evadir la pantalla de bloqueo y ejecutar comandos arbitrarios, tal y como fue demostrado presionando la tecla SUPER antes de que la pantalla se bloquee automáticamente."
    }
  ],
  "lastModified": "2026-06-17T00:07:47.897",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1170F9BB-9FFB-407F-B8D3-F8417383021F",
              "versionEndIncluding": "7.2.0"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "982E87CF-26D7-4D2F-AA5F-57798C2F4D33"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5CD4318-783D-4428-815B-DD2C6F912C3F"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2562307E-490C-485E-9C1A-4A569565270F"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35E3A65D-6F6F-4457-A836-89A54CEDB9D9"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A052C0C4-4408-4014-AE8F-F894AB04BF1F"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07D5E8C8-34DD-4EA0-B686-2088F5C11122"
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@ubuntu.com"
}