{"api_version":"1","generated_at":"2026-07-23T08:52:31+00:00","cve":"CVE-2014-3204","urls":{"html":"https://cve.report/CVE-2014-3204","api":"https://cve.report/api/cve/CVE-2014-3204.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-3204","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-3204"},"summary":{"title":"CVE-2014-3204","description":"Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.","state":"PUBLISHED","assigner":"canonical","published_at":"2014-05-06 14:55:06","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.4","severity":"","vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://ubuntu.com/usn/usn-2184-1","name":"http://ubuntu.com/usn/usn-2184-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"USN-2184-1: Unity vulnerabilities | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2014/05/03/1","name":"http://www.openwall.com/lists/oss-security/2014/05/03/1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: Ubuntu 14.04: security problem in the lock screen","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885","name":"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Bug #1313885 “lock screen bypass” : Bugs : unity package : Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/67117","name":"http://www.securityfocus.com/bid/67117","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Ubuntu 'Unity' Package Local Security Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.openwall.com/lists/oss-security/2014/04/29/2","name":"http://www.openwall.com/lists/oss-security/2014/04/29/2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: Ubuntu 14.04: security problem in the lock screen","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3204","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3204","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"3204","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"7.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3204","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"7.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3204","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"7.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3204","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"7.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3204","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"7.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3204","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"7.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3204","vulnerable":"1","versionEndIncluding":"7.2.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3204","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"14.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"lts","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T10:35:57.088Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"[oss-security] 20140429 Re: Ubuntu 14.04: security problem in the lock screen","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2014/04/29/2"},{"name":"67117","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/67117"},{"name":"[oss-security] 20140503 Re: Ubuntu 14.04: security problem in the lock screen","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2014/05/03/1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885"},{"name":"USN-2184-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://ubuntu.com/usn/usn-2184-1"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-04-28T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2014-05-06T12:57:00.000Z","orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical"},"references":[{"name":"[oss-security] 20140429 Re: Ubuntu 14.04: security problem in the lock screen","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2014/04/29/2"},{"name":"67117","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/67117"},{"name":"[oss-security] 20140503 Re: Ubuntu 14.04: security problem in the lock screen","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2014/05/03/1"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885"},{"name":"USN-2184-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://ubuntu.com/usn/usn-2184-1"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@ubuntu.com","ID":"CVE-2014-3204","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"[oss-security] 20140429 Re: Ubuntu 14.04: security problem in the lock screen","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2014/04/29/2"},{"name":"67117","refsource":"BID","url":"http://www.securityfocus.com/bid/67117"},{"name":"[oss-security] 20140503 Re: Ubuntu 14.04: security problem in the lock screen","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2014/05/03/1"},{"name":"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885","refsource":"CONFIRM","url":"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885"},{"name":"USN-2184-1","refsource":"UBUNTU","url":"http://ubuntu.com/usn/usn-2184-1"}]}}}},"cveMetadata":{"assignerOrgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","assignerShortName":"canonical","cveId":"CVE-2014-3204","datePublished":"2014-05-06T14:00:00.000Z","dateReserved":"2014-05-03T00:00:00.000Z","dateUpdated":"2024-08-06T10:35:57.088Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-05-06 14:55:06","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:*:*:*:*:*:*:*:*","versionEndIncluding":"7.2.0","matchCriteriaId":"1170F9BB-9FFB-407F-B8D3-F8417383021F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"982E87CF-26D7-4D2F-AA5F-57798C2F4D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B5CD4318-783D-4428-815B-DD2C6F912C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2562307E-490C-485E-9C1A-4A569565270F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"35E3A65D-6F6F-4457-A836-89A54CEDB9D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A052C0C4-4408-4014-AE8F-F894AB04BF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"07D5E8C8-34DD-4EA0-B686-2088F5C11122"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"3204","Ordinal":"1","Title":"CVE-2014-3204","CVE":"CVE-2014-3204","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"3204","Ordinal":"1","NoteData":"Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.","Type":"Description","Title":"CVE-2014-3204"},{"CveYear":"2014","CveId":"3204","Ordinal":"2","NoteData":"2014-05-06","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"3204","Ordinal":"3","NoteData":"2014-05-06","Type":"Other","Title":"Modified"}]}}}