debian/apparmor vulnerabilities

Latest debian/apparmor CVEs

Newest publication first

1. CVE-2016-1585 AppArmor mount rules grant excessive permissions

   Published 2019-04-22

   Critical·CVSS 9.8 EPSS 1.0%

   In all versions of AppArmor mount rules are accidentally widened when compiled.

2. CVE-2017-6507 An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have i...

   Published 2017-03-24

   Medium·CVSS 5.9 EPSS 1.6%

   An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have increased attack surfaces of processes that were intended to be confined by AppAr...

3. CVE-2014-1424 apparmor_parser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw."

   Published 2014-11-24

   Medium·CVSS 6.4 EPSS 1.6%

   apparmor_parser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw."

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.