CVE-2016-1585 AppArmor mount rules grant excessive permissions
CriticalCVSS 9.8
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In all versions of AppArmor mount rules are accidentally widened when compiled.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/apparmor(Ubuntu:22.04) | < 3.0.4-2ubuntu2.4 | 3.0.4-2ubuntu2.4 |
| debian/apparmor(Debian:12) | All versions | No fix listed |
| debian/apparmor(Debian:12) | = 3.0.12-1 | No fix listed |
| debian/apparmor(Debian:12) | = 3.0.13-1 | No fix listed |
| debian/apparmor(Debian:12) | = 3.0.13-2 | No fix listed |
| debian/apparmor(Debian:12) | = 3.0.8-3 | No fix listed |
| debian/apparmor(Debian:12) | = 3.1.7-1 | No fix listed |
| debian/apparmor(Debian:12) | = 3.1.7-2 | No fix listed |
| debian/apparmor(Debian:12) | = 3.1.7-3 | No fix listed |
| debian/apparmor(Debian:12) | = 3.1.7-4 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.0-1 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.0~beta5-1 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.0~beta5-2 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.0~beta5-3 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.0~beta5-4 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.0~beta5-5 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.0~beta5-6 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.3-1 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.6-2 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.6-3 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.7-1 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.7-2 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.7-3 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.7-4 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.7-5 | No fix listed |
Show 15 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/apparmor(Debian:12) | = 4.1.7-6 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.8-1 | No fix listed |
| debian/apparmor(Debian:12) | = 4.1.8-2 | No fix listed |
| debian/apparmor(Debian:12) | = 5.0.1-1 | No fix listed |
| debian/apparmor(Debian:12) | = 5.0.2-1 | No fix listed |
| debian/apparmor(Debian:12) | = 5.0.2-2 | No fix listed |
| debian/apparmor(Debian:12) | = 5.0.2-3 | No fix listed |
| debian/apparmor(Debian:12) | = 5.0.2-4 | No fix listed |
| debian/apparmor(Debian:13) | < 3.0.12-1 | 3.0.12-1 |
| debian/apparmor(Debian:14) | < 3.0.12-1 | 3.0.12-1 |
| Canonical apparmor | < 2.13.10 | 2.13.10 |
| Canonical apparmor | >= 3.0.0, < 3.0.12 | 3.0.12 |
| Canonical apparmor | >= 3.1.0, < 3.1.6 | 3.1.6 |
| alpine/apparmor(Alpine:v3.17) | >= 3.0.0, < 3.1.7-r0 | 3.1.7-r0 |
| apparmor | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-7035-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2016-1585 vendor-advisory
- bugs.launchpad.net issue-tracking third-party-advisory
- [mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar mailing-list third-party-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking