Ubuntu AppArmor is prone to a security-bypass vulnerability.
An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks.
Versions prior to Ubuntu AppArmor prior to 2.12 are vulnerable.
Information
Ubuntu Ubuntu Linux 16.04 LTS
Ubuntu Ubuntu Linux 14.04 LTS
Ubuntu Ubuntu Linux 12.04 LTS i386
Ubuntu Ubuntu Linux 12.04 LTS amd64
Ubuntu AppArmor 2.10
openSUSE Leap 42.2
openSUSE Leap 42.1
References:
- AppArmor Homepage (Kees Cook)
- ~apparmor-dev/apparmor/master (launchpad)
- CVE-2017-6507 (canonical)
- CVE-2017-6507: apparmor service restarts and package upgrades unload privately m (launchpad)
- Viewing all changes in revision 3647. (launchpad)