CVE catalog

CVE-2017-6507

apparmor: CVE-2017-6507

[CVE catalog]

Severity
Medium · CVSS 5.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.59% · Oct 25, 2026

An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have increased attack surfaces of processes that were intended to be confined by AppArmor. This is due to the common logic to handle 'restart' operations removing AppArmor profiles that aren't found in the typical filesystem locations, such as /etc/apparmor.d/. Userspace projects that manage their own AppArmor profiles in atypical directories, such as what's done by LXD and Docker, are affected by this flaw in the AppArmor init script logic.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianapparmorsid4.1.8-3fixed
Debianapparmorforky4.1.8-3fixed
Debianapparmortrixie4.1.0-1fixed
Debianapparmorbookworm3.0.8-3fixed
Ubuntuapparmor14.042.8.0-0ubuntu31vulnerable
Ubuntuapparmor14.042.8.0-0ubuntu32vulnerable
Ubuntuapparmor14.042.8.0-0ubuntu33vulnerable
Ubuntuapparmor14.042.8.0-0ubuntu34vulnerable
Ubuntuapparmor14.042.8.0-0ubuntu35vulnerable
Ubuntuapparmor14.042.8.0-0ubuntu37vulnerable
Ubuntuapparmor14.042.8.0-0ubuntu38vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu1vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu2vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu3vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu5vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu5.1vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu5.2vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu5.3vulnerable
Ubuntuapparmor14.042.10.95-0ubuntu2.5~14.04.1vulnerable
Ubuntuapparmor14.042.10.95-0ubuntu2.6~14.04.1fixed
Ubuntuapparmor16.042.10-0ubuntu6vulnerable
Ubuntuapparmor16.042.10-0ubuntu7vulnerable
Ubuntuapparmor16.042.10-0ubuntu8vulnerable
Ubuntuapparmor16.042.10-0ubuntu10vulnerable
Ubuntuapparmor16.042.10-0ubuntu11vulnerable
Ubuntuapparmor16.042.10-0ubuntu12vulnerable
Ubuntuapparmor16.042.10-3ubuntu1vulnerable
Ubuntuapparmor16.042.10-3ubuntu2vulnerable
Ubuntuapparmor16.042.10.95-0ubuntu1vulnerable
Ubuntuapparmor16.042.10.95-0ubuntu2vulnerable
Ubuntuapparmor16.042.10.95-0ubuntu2.2vulnerable
Ubuntuapparmor16.042.10.95-0ubuntu2.5vulnerable
Ubuntuapparmor16.042.10.95-0ubuntu2.6fixed
Ubuntuapparmor14.042.8.0-0ubuntu31vulnerable
Ubuntuapparmor14.042.8.0-0ubuntu32vulnerable
Ubuntuapparmor14.042.8.0-0ubuntu33vulnerable
Ubuntuapparmor14.042.8.0-0ubuntu34vulnerable
Ubuntuapparmor14.042.8.0-0ubuntu35vulnerable
Ubuntuapparmor14.042.8.0-0ubuntu37vulnerable
Ubuntuapparmor14.042.8.0-0ubuntu38vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu1vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu2vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu3vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu5vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu5.1vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu5.2vulnerable
Ubuntuapparmor14.042.8.95~2430-0ubuntu5.3vulnerable
Ubuntuapparmor14.042.10.95-0ubuntu2.5~14.04.1vulnerable
Ubuntuapparmor14.042.10.95-0ubuntu2.6~14.04.1fixed
Ubuntuapparmor16.042.10-0ubuntu6vulnerable
Ubuntuapparmor16.042.10-0ubuntu7vulnerable
Ubuntuapparmor16.042.10-0ubuntu8vulnerable
Ubuntuapparmor16.042.10-0ubuntu10vulnerable
Ubuntuapparmor16.042.10-0ubuntu11vulnerable
Ubuntuapparmor16.042.10-0ubuntu12vulnerable
Ubuntuapparmor16.042.10-3ubuntu1vulnerable
Ubuntuapparmor16.042.10-3ubuntu2vulnerable
Ubuntuapparmor16.042.10.95-0ubuntu1vulnerable
Ubuntuapparmor16.042.10.95-0ubuntu2vulnerable
Ubuntuapparmor16.042.10.95-0ubuntu2.2vulnerable
Ubuntuapparmor16.042.10.95-0ubuntu2.5vulnerable
Ubuntuapparmor16.042.10.95-0ubuntu2.6fixed
Suseapparmorlinux enterprise desktop 12 sp12.8.2-54.1fixed
Suseapparmorlinux enterprise desktop 12 sp22.8.2-54.1fixed
Suseapparmorlinux enterprise server for raspberry pi 12 sp22.8.2-54.1fixed
Suseapparmorlinux enterprise software development kit 12 sp12.8.2-54.1fixed
Suseapparmorlinux enterprise software development kit 12 sp22.8.2-54.1fixed
Suseapparmorlinux enterprise server 12 sp12.8.2-54.1fixed
Suseapparmorlinux enterprise server for sap applications 12 sp12.8.2-54.1fixed
Suseapparmorlinux enterprise server 12 sp22.8.2-54.1fixed
Suseapparmorlinux enterprise server for sap applications 12 sp22.8.2-54.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianapparmorsourcesid2.11.0-3not yet assignedNot reported[858768]
Debianapparmorsourceforky2.11.0-3not yet assignedNot reported[858768]
Debianapparmorsourcetrixie2.11.0-3not yet assignedNot reported[858768]
Debianapparmorsourcebookworm2.11.0-3not yet assignedNot reported[858768]
Ubuntuapparmordeb14.042.10.95-0ubuntu2.6~14.04.1Not reportedUBUNTU-CVE-2017-6507Not reported
Ubuntuapparmordeb16.042.10.95-0ubuntu2.6Not reportedUBUNTU-CVE-2017-6507Not reported
Ubuntuapparmordeb14.042.10.95-0ubuntu2.6~14.04.1Not reportedUSN-3247-1Not reported
Ubuntuapparmordeb16.042.10.95-0ubuntu2.6Not reportedUSN-3247-1Not reported
Suseapparmorrpmlinux enterprise desktop 12 sp12.8.2-54.1Not reportedSUSE-SU-2017:1151-1Not reported
Suseapparmorrpmlinux enterprise desktop 12 sp22.8.2-54.1Not reportedSUSE-SU-2017:1151-1Not reported
Suseapparmorrpmlinux enterprise server for raspberry pi 12 sp22.8.2-54.1Not reportedSUSE-SU-2017:1151-1Not reported
Suseapparmorrpmlinux enterprise software development kit 12 sp12.8.2-54.1Not reportedSUSE-SU-2017:1151-1Not reported
Suseapparmorrpmlinux enterprise software development kit 12 sp22.8.2-54.1Not reportedSUSE-SU-2017:1151-1Not reported
Suseapparmorrpmlinux enterprise server 12 sp12.8.2-54.1Not reportedSUSE-SU-2017:1151-1Not reported
Suseapparmorrpmlinux enterprise server for sap applications 12 sp12.8.2-54.1Not reportedSUSE-SU-2017:1151-1Not reported
Suseapparmorrpmlinux enterprise server 12 sp22.8.2-54.1Not reportedSUSE-SU-2017:1151-1Not reported
Suseapparmorrpmlinux enterprise server for sap applications 12 sp22.8.2-54.1Not reportedSUSE-SU-2017:1151-1Not reported

[Debian bug #858768]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [apparmor]Fixed
    Details (2)

    • 3.0.8-3 · amd64 · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

    • 3.0.8-3 · arm64 · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

  • [apparmor-notify]Fixed

    Source package: [apparmor]

    Details (2)

    • 3.0.8-3 · all · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

    • 3.0.8-3 · all · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

  • [apparmor-profiles]Fixed

    Source package: [apparmor]

    Details (2)

    • 3.0.8-3 · all · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

    • 3.0.8-3 · all · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

  • [apparmor-utils]Fixed

    Source package: [apparmor]

    Details (2)

    • 3.0.8-3 · all · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

    • 3.0.8-3 · all · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

  • [dh-apparmor]Fixed

    Source package: [apparmor]

    Details (2)

    • 3.0.8-3 · all · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

    • 3.0.8-3 · all · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

  • [libapache2-mod-apparmor]Fixed

    Source package: [apparmor]

    Details (2)

    • 3.0.8-3 · amd64 · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

    • 3.0.8-3 · arm64 · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

  • [libapparmor1]Fixed

    Source package: [apparmor]

    Details (2)

    • 3.0.8-3 · amd64 · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

    • 3.0.8-3 · arm64 · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

  • [libapparmor-dev]Fixed

    Source package: [apparmor]

    Details (2)

    • 3.0.8-3 · amd64 · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

    • 3.0.8-3 · arm64 · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

  • [libpam-apparmor]Fixed

    Source package: [apparmor]

    Details (2)

    • 3.0.8-3 · amd64 · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

    • 3.0.8-3 · arm64 · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

  • [python3-apparmor]Fixed

    Source package: [apparmor]

    Details (2)

    • 3.0.8-3 · all · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

    • 3.0.8-3 · all · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

  • [python3-libapparmor]Fixed

    Source package: [apparmor]

    Details (2)

    • 3.0.8-3 · amd64 · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

    • 3.0.8-3 · arm64 · bookworm

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · bookworm; dsa · apparmor · debian · 12

[Debian 13 (Trixie)]

  • [apparmor]Fixed
    Details (2)

    • 4.1.0-1 · amd64 · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

    • 4.1.0-1 · arm64 · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

  • [apparmor-notify]Fixed

    Source package: [apparmor]

    Details (2)

    • 4.1.0-1 · all · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

    • 4.1.0-1 · all · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

  • [apparmor-profiles]Fixed

    Source package: [apparmor]

    Details (2)

    • 4.1.0-1 · all · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

    • 4.1.0-1 · all · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

  • [apparmor-utils]Fixed

    Source package: [apparmor]

    Details (2)

    • 4.1.0-1 · all · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

    • 4.1.0-1 · all · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

  • [dh-apparmor]Fixed

    Source package: [apparmor]

    Details (2)

    • 4.1.0-1 · all · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

    • 4.1.0-1 · all · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

  • [libapache2-mod-apparmor]Fixed

    Source package: [apparmor]

    Details (2)

    • 4.1.0-1 · amd64 · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

    • 4.1.0-1 · arm64 · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

  • [libapparmor1]Fixed

    Source package: [apparmor]

    Details (2)

    • 4.1.0-1 · amd64 · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

    • 4.1.0-1 · arm64 · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

  • [libapparmor-dev]Fixed

    Source package: [apparmor]

    Details (2)

    • 4.1.0-1 · amd64 · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

    • 4.1.0-1 · arm64 · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

  • [libpam-apparmor]Fixed

    Source package: [apparmor]

    Details (2)

    • 4.1.0-1 · amd64 · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

    • 4.1.0-1 · arm64 · trixie

      Fixed · Fixed: 2.11.0-3

      dsa · apparmor · debian · 13

Next results

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]