PT-2017-17120 · Canonical+1 · Apparmor+2
Stéphane Graber
+1
·
Publicado
2017-03-24
·
Atualizado
2019-10-03
·
CVE-2017-6507
CVSS v3.1
5.9
Média
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
AppArmor versions prior to 2.12
Description
An issue in AppArmor allows an attacker to possibly have increased attack surfaces of processes that were intended to be confined by AppArmor. This is due to incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files. The common logic to handle 'restart' operations removes AppArmor profiles that aren't found in the typical filesystem locations, such as /etc/apparmor.d/. Userspace projects that manage their own AppArmor profiles in atypical directories are affected by this flaw.
Recommendations
For versions prior to 2.12, update to version 2.12 or later to resolve the issue. As a temporary workaround, consider modifying the AppArmor init script logic to correctly handle unknown AppArmor profiles in atypical directories. Restrict access to the affected processes to minimize the risk of exploitation until the issue is resolved.
Correção
Improper Privilege Management
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apparmor
Suse
Ubuntu