Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.2
CVE-2014-1949: Cinnamon, Gnome Screensaver Menu Button Lock Bypass
CVE-2014-1949 · published 11 years ago
Summary
Cinnamon and Gnome screensavers have a security flaw that allows attackers to bypass the lock screen. This means that if an attacker is near the computer, they can access the screen without entering the correct password. To fix this, update your Cinnamon or Gnome screensaver software to the latest version.
What to do
- Update debian cinnamon to version 2.2.14-1.
- Update debian gtk+3.0 to version 3.11.8-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | cinnamon |
< 2.2.14-1 Fix: upgrade to 2.2.14-1
|
| Debian:12 | debian | cinnamon |
< 2.2.14-1 Fix: upgrade to 2.2.14-1
|
| Debian:13 | debian | cinnamon |
< 2.2.14-1 Fix: upgrade to 2.2.14-1
|
| Debian:14 | debian | cinnamon |
< 2.2.14-1 Fix: upgrade to 2.2.14-1
|
| Debian:11 | debian | gtk+3.0 |
< 3.11.8-1 Fix: upgrade to 3.11.8-1
|
| Debian:12 | debian | gtk+3.0 |
< 3.11.8-1 Fix: upgrade to 3.11.8-1
|
| Debian:13 | debian | gtk+3.0 |
< 3.11.8-1 Fix: upgrade to 3.11.8-1
|
| Debian:14 | debian | gtk+3.0 |
< 3.11.8-1 Fix: upgrade to 3.11.8-1
|
| – | linuxmint | linux_mint |
17.0 cpe:2.3:o:linuxmint:linux_mint:17.0:*:*:*:*:*:*:* |
| – | gnome | gtk |
<= 3.10.9 cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:* |
| – | canonical | ubuntu |
14.04 cpe:2.3:o:canonical:ubuntu:14.04:*:*:*:lts:*:*:* |
Original advisory text
GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.
GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.
References
- https://security-tracker.debian.org/tracker/CVE-2014-1949 Vendor Advisory
- http://advisories.mageia.org/MGASA-2014-0374.html Third Party Advisory
- http://seclists.org/oss-sec/2014/q1/327 Mailing List Third Party Advisory
- http://seclists.org/oss-sec/2014/q1/331 Mailing List Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:162 Broken Link
- http://www.ubuntu.com/usn/USN-2475-1 Third Party Advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759145 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1064695 Issue Tracking
- https://github.com/linuxmint/cinnamon-screensaver/issues/44 Third Party Advisory
Severity
7.2
High
Type
CWE-284Improper Access Control
Timeline
Published16 Jan 2015
Updated4 Nov 2026
First seen18 Aug 2026
Track software like this
Free during beta