USN-2184-2
unity vulnerabilities
USN-2184-1 fixed lock screen vulnerabilities in Unity. Further testing has uncovered more issues which have been fixed in this update. This update also fixes a regression with the shutdown dialogue.
We apologize for the inconvenience.
Original advisory details:
Frédéric Bardy discovered that Unity incorrectly filtered keyboard shortcuts when the screen was locked. A local attacker could possibly use this issue to run commands, and unlock the current session.
Giovanni Mellini discovered that Unity could display the Dash in certain conditions when the screen was locked. A local attacker could possibly use this issue to run commands, and unlock the current session.
What each source reports
OSV No score
unity vulnerabilities
USN-2184-1 fixed lock screen vulnerabilities in Unity. Further testing has uncovered more issues which have been fixed in this update. This update also fixes a regression with the shutdown dialogue.
We apologize for the inconvenience.
Original advisory details:
Frédéric Bardy discovered that Unity incorrectly filtered keyboard shortcuts when the screen was locked. A local attacker could possibly use this issue to run commands, and unlock the current session.
Giovanni Mellini discovered that Unity could display the Dash in certain conditions when the screen was locked. A local attacker could possibly use this issue to run commands, and unlock the current session.
- Record
USN-2184-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
unityUbuntu:14.04:LTS |
before 7.2.0+14.04.20140423-0ubuntu1.2, plus listed versions 7.1.2+13.10.20131014.1-0ubuntu17.1.2+14.04.20131106.1-0ubuntu17.1.2+14.04.20131106.1-0ubuntu27.1.2+14.04.20131106.1-0ubuntu47.1.2+14.04.20131106.1-0ubuntu5 Show 24 moreShow less7.1.2+14.04.20140214.1-0ubuntu17.1.2+14.04.20140217-0ubuntu17.1.2+14.04.20140218.1-0ubuntu17.1.2+14.04.20140218.1-0ubuntu27.1.2+14.04.20140220-0ubuntu17.1.2+14.04.20140228-0ubuntu17.1.2+14.04.20140303-0ubuntu17.1.2+14.04.20140305-0ubuntu17.1.2+14.04.20140311-0ubuntu17.1.2+14.04.20140312-0ubuntu17.1.2+14.04.20140313-0ubuntu17.1.2+14.04.20140318-0ubuntu17.1.2+14.04.20140320.1-0ubuntu17.1.2+14.04.20140321-0ubuntu17.1.2+14.04.20140328.1-0ubuntu17.2.0+14.04.20140402-0ubuntu17.2.0+14.04.20140403-0ubuntu17.2.0+14.04.20140404-0ubuntu17.2.0+14.04.20140410-0ubuntu17.2.0+14.04.20140410.1-0ubuntu17.2.0+14.04.20140411-0ubuntu17.2.0+14.04.20140414.1-0ubuntu17.2.0+14.04.20140416-0ubuntu17.2.0+14.04.20140423-0ubuntu1.1 |
7.2.0+14.04.20140423-0ubuntu1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-2184-2 is a vulnerability with no CVSS score yet in unity, published April 30, 2014. No source lists public exploit code. Fixed in unity 7.2.0+14.04.20140423-0ubuntu1.2.