CVE-2016-2312

Publication date 23 December 2016

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
plasma-workspace	18.10 cosmic	Not affected
	18.04 LTS bionic	Not affected
	17.10 artful	Not affected
	17.04 zesty	Ignored
	16.10 yakkety	Ignored
	16.04 LTS xenial	Not affected
	15.10 wily	Fixed 4:5.4.2-0ubuntu1.1
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release

Notes

seth-arnold

the xenial plasma-workspace package is very different; I suspect it's not-affected but I can't say that definitively nor state where the affected code might live in xenial.

Severity score breakdown

Parameter	Value
Base score	6.8 · Medium
Attack vector	Physical
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H