UBUNTU-CVE-2017-6507

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2017-6507

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-6507.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2017-6507

Related

Published

2017-03-24T00:00:00Z

Modified

2017-03-24T00:00:00Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

[none]

Details

An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have increased attack surfaces of processes that were intended to be confined by AppArmor. This is due to the common logic to handle 'restart' operations removing AppArmor profiles that aren't found in the typical filesystem locations, such as /etc/apparmor.d/. Userspace projects that manage their own AppArmor profiles in atypical directories, such as what's done by LXD and Docker, are affected by this flaw in the AppArmor init script logic.

References

Affected packages

Ubuntu:14.04:LTS / apparmor

Package

Name: apparmor
Purl: pkg:deb/ubuntu/apparmor?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.10.95-0ubuntu2.6~14.04.1

Affected versions

2.*

2.8.0-0ubuntu31

2.8.0-0ubuntu32

2.8.0-0ubuntu33

2.8.0-0ubuntu34

2.8.0-0ubuntu35

2.8.0-0ubuntu37

2.8.0-0ubuntu38

2.8.95~2430-0ubuntu1

2.8.95~2430-0ubuntu2

2.8.95~2430-0ubuntu3

2.8.95~2430-0ubuntu5

2.8.95~2430-0ubuntu5.1

2.8.95~2430-0ubuntu5.2

2.8.95~2430-0ubuntu5.3

2.10.95-0ubuntu2.5~14.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "apparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "apparmor-dbgsym"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "apparmor-docs"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "apparmor-easyprof"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "apparmor-notify"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "apparmor-profiles"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "apparmor-utils"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "dh-apparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "libapache2-mod-apparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "libapache2-mod-apparmor-dbgsym"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "libapparmor-dev"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "libapparmor-perl"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "libapparmor-perl-dbgsym"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "libapparmor1"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "libapparmor1-dbgsym"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "libpam-apparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "libpam-apparmor-dbgsym"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "python-apparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "python-libapparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "python-libapparmor-dbgsym"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "python3-apparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "python3-libapparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6~14.04.1",
            "binary_name": "python3-libapparmor-dbgsym"
        }
    ]
}

Ubuntu:16.04:LTS / apparmor

Package

Name: apparmor
Purl: pkg:deb/ubuntu/apparmor?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.10.95-0ubuntu2.6

Affected versions

2.*

2.10-0ubuntu6

2.10-0ubuntu7

2.10-0ubuntu8

2.10-0ubuntu10

2.10-0ubuntu11

2.10-0ubuntu12

2.10-3ubuntu1

2.10-3ubuntu2

2.10.95-0ubuntu1

2.10.95-0ubuntu2

2.10.95-0ubuntu2.2

2.10.95-0ubuntu2.5

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "apparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "apparmor-dbgsym"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "apparmor-docs"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "apparmor-easyprof"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "apparmor-notify"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "apparmor-profiles"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "apparmor-utils"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "dh-apparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "libapache2-mod-apparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "libapache2-mod-apparmor-dbgsym"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "libapparmor-dev"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "libapparmor-perl"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "libapparmor-perl-dbgsym"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "libapparmor1"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "libapparmor1-dbgsym"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "libpam-apparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "libpam-apparmor-dbgsym"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "python-apparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "python-libapparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "python3-apparmor"
        },
        {
            "binary_version": "2.10.95-0ubuntu2.6",
            "binary_name": "python3-libapparmor"
        }
    ]
}