CVE-2015-1319
The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04...
The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a USB thumb drive.
Exploit likelihood
What each source reports
NVD Score used
The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a USB thumb drive.
- Record
CVE-2015-1319- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a USB thumb drive.
- Record
CVE-2015-1319- Updated
- 2026-11-02
EUVDEUVD-2015-1460 No score
The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a USB thumb drive.
- Record
EUVD-2015-1460- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v9qw-3gh7-4hvj No score
The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04...
The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a USB thumb drive.
- Record
GHSA-v9qw-3gh7-4hvj- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-1319 No score
The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a USB thumb drive.
- Record
UBUNTU-CVE-2015-1319- Updated
- 2026-11-02
OSVUSN-2741-1 No score
unity-settings-daemon vulnerability
It was discovered that the Unity Settings Daemon incorrectly allowed removable media to be mounted when the screen is locked. If a vulnerability were discovered in some other desktop component, such as an image library, a local attacker could possibly use this issue to gain access to the session.
- Record
USN-2741-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
unity-settings-daemonUbuntu:14.04:LTS |
before 14.04.0+14.04.20150825-0ubuntu2, plus listed versions 14.04.0-0ubuntu114.04.0-0ubuntu214.04.0+14.04.20140219-0ubuntu114.04.0+14.04.20140221-0ubuntu114.04.0+14.04.20140221.1-0ubuntu1 Show 12 moreShow less14.04.0+14.04.20140225-0ubuntu114.04.0+14.04.20140228-0ubuntu114.04.0+14.04.20140310-0ubuntu114.04.0+14.04.20140310-0ubuntu214.04.0+14.04.20140402-0ubuntu114.04.0+14.04.20140404-0ubuntu114.04.0+14.04.20140407-0ubuntu114.04.0+14.04.20140414-0ubuntu114.04.0+14.04.20140606-0ubuntu114.04.0+14.04.20140606-0ubuntu214.04.0+14.04.20140606-0ubuntu314.04.0+14.04.20150825-0ubuntu1 |
14.04.0+14.04.20150825-0ubuntu2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-1319 is a low vulnerability (CVSS 2.1) in Canonical Ubuntu Linux, published April 3, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in unity-settings-daemon 14.04.0+14.04.20150825-0ubuntu2.