PatchTheCVECVE-2017-6507: An issue was discovered in AppArmor before 2.12
CVE-2017-6507 is a medium-severity flaw (CVSS 5.9) affecting apparmor, ubuntu core, ubuntu touch. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have increased attack surfaces of processes that were intended to be confined by AppArmor. This is due to the common logic to handle 'restart' operations removing AppArmor profiles that aren't found in the typical filesystem locations, such as /etc/apparmo
Why this priority
- Remotely exploitable, no login, no user action
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.9 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | High |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 1.6% (top 24%) |
| CISA exploited list | No |
| Weakness | CWE-269 |
| Published | 2017-03-24 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2017-6507?
apparmor: upgrade to newer than 2.11; ubuntu core: mitigate or apply the listed mitigation; ubuntu touch: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2017-6507 being exploited?
CVE-2017-6507 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2017-6507 affect?
CVE-2017-6507 affects apparmor, ubuntu core, ubuntu touch. Severity is medium (CVSS 5.9). An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have increased attack surfaces of processes th
How urgent is CVE-2017-6507?
Priority 50/100. Remotely exploitable, no login, no user action; On your watchlist
Software pages
Related CVEs
- CVE-2016-1585 CRITICAL 9.8 UPGRADE In all versions of AppArmor mount rules are accidentally widened when compiled.
- CVE-2014-1424 MEDIUM 6.4 UPGRADE MITIGATE apparmor_parser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypa