Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2015-7946

MTP service exposed during emergency dialer

Description

Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Canonical unity8 (Ubuntu)

  • 8.11 to < 8.11+16.04.20160111.1-0ubuntu1affected

References