PatchTheCVEapparmor vulnerabilities and fixes
Recent CVEs affecting apparmor, with upgrade or downgrade steps. 3 tracked.
apparmor has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2019-04-22. Highest priority: CVE-2016-1585 (score 55/100).
- CVE-2017-6507 MEDIUM 5.9 UPGRADE MITIGATE An issue was discovered in AppArmor before 2.12
- CVE-2016-1585 CRITICAL 9.8 UPGRADE In all versions of AppArmor mount rules are accidentally widened when compiled.
- CVE-2014-1424 MEDIUM 6.4 UPGRADE MITIGATE apparmor_parser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypa
FAQ
How do I fix apparmor vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is apparmor being exploited right now?
None of the tracked apparmor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which apparmor CVE should I patch first?
CVE-2016-1585 currently ranks highest (55/100): In all versions of AppArmor mount rules are accidentally widened when compiled..