{"id":"UBUNTU-CVE-2018-20681","details":"mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control applications. By unplugging and re-plugging or power-cycling external output devices (such as additionally attached graphical outputs via HDMI, VGA, DVI, etc.) the content of a screensaver-locked session can be revealed. In some scenarios, the attacker can execute applications, such as by clicking with a mouse.","modified":"2025-10-24T04:47:18Z","published":"2019-01-09T23:29:00Z","upstream":["CVE-2018-20681"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2018-20681"},{"type":"REPORT","url":"https://github.com/mate-desktop/mate-screensaver/issues/152"},{"type":"REPORT","url":"https://github.com/mate-desktop/mate-screensaver/issues/155"},{"type":"REPORT","url":"https://github.com/mate-desktop/mate-screensaver/issues/170"},{"type":"REPORT","url":"https://github.com/mate-desktop/mate-screensaver/pull/167"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2018-20681"}],"affected":[{"package":{"name":"mate-screensaver","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/mate-screensaver@1.12.0-1?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.2-1","1.12.0-1"],"ecosystem_specific":{"binaries":[{"binary_name":"mate-screensaver","binary_version":"1.12.0-1"},{"binary_name":"mate-screensaver-common","binary_version":"1.12.0-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-20681.json"}},{"package":{"name":"mate-screensaver","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/mate-screensaver@1.20.0-1?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.18.1-2ubuntu0","1.18.2-1","1.19.1-0ubuntu1","1.19.1-0ubuntu2","1.20.0-0ubuntu1","1.20.0-1"],"ecosystem_specific":{"binaries":[{"binary_name":"mate-screensaver","binary_version":"1.20.0-1"},{"binary_name":"mate-screensaver-common","binary_version":"1.20.0-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-20681.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"type":"Ubuntu","score":"medium"}]}