CVE-2014-1949: High severity linux mint vulnerability
Clemens Fries reported that, when using Cinnamon, it was possible to bypass the screensaver lock:
http://seclists.org/oss-sec/2014/q1/327
An attacker with physical access to the machine could use this flaw to take over the locked desktop session.
A patch is currently not yet available.
Other sources
GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1949?
CVE-2014-1949 has been classified as a high severity vulnerability due to its potential to allow unauthorized access to a locked desktop session.
How do I fix CVE-2014-1949?
To fix CVE-2014-1949, users should upgrade to patched versions of their operating systems or desktop environments that address this vulnerability.
Who is affected by CVE-2014-1949?
CVE-2014-1949 primarily affects users of Linux Mint 17.0 and Ubuntu 14.04 who utilize the Cinnamon desktop environment.
Can CVE-2014-1949 be exploited remotely?
CVE-2014-1949 requires physical access to the machine, making it not directly exploitable remotely.
What type of vulnerability is CVE-2014-1949?
CVE-2014-1949 is a physical access vulnerability that allows attackers to bypass the screensaver lock on affected systems.