CVE-2015-1319

Name: CVE-2015-1319
Creator: NVD / NIST
Published: 2015-09-17T16:59:00.087+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.36%

Last modified Jun 17, 2026

CVE-2015-1319 is a vulnerability of currently unknown severity. The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a USB thumb drive.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.

Description

The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a USB thumb drive.

Metrics

EPSS Probability

0.36%

28.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-20

Affected Software

Vendor	Product	Versions
Canonical	Ubuntu Linux	14.04
Canonical	Ubuntu Linux	15.04

References

http://www.ubuntu.com/usn/USN-2741-1Patch, Vendor Advisory
https://bugs.launchpad.net/ubuntu/%2Bsource/unity/%2Bbug/1438870Third Party Advisory
http://www.ubuntu.com/usn/USN-2741-1Patch, Vendor Advisory
https://bugs.launchpad.net/ubuntu/%2Bsource/unity/%2Bbug/1438870Third Party Advisory

Timeline

Published: Sep 17, 2015
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2015-1319?

How severe is CVE-2015-1319?

Severity scoring for CVE-2015-1319 is pending analysis. The EPSS model estimates a 0.36% probability of exploitation in the next 30 days.

How do I fix CVE-2015-1319?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-1319?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST