CVEs related to bugs in AppArmor

Open bugs

Bug	CVE(s)
Bug #1383886: disable sha-1 hashing for policy for Ubuntu Touch	CVE-2014-8134
AppArmor	In progress, assigned to John Johansen
Bug #1496430: Docker-1.8.2 can't create container, due to apparmor denying 'disconnected path'	CVE-2015-2925 CVE-2015-5156 CVE-2015-5257 CVE-2015-6937 CVE-2015-7312
AppArmor	In progress, assigned to John Johansen
Bug #1648903: Permission denied and inconsistent behavior in complain mode with 'ip netns list' command	CVE-2017-5986 CVE-2017-6353
AppArmor	In progress, assigned to John Johansen
Bug #1656121: unexpected errno=13 and disconnected path when trying to open /proc/1/ns/mnt from a unshared mount namespace	CVE-2017-5986 CVE-2017-6353 CVE-2017-7184
AppArmor	Confirmed (unassigned)
Bug #1658219: flock not mediated by 'k'	CVE-2017-7184
AppArmor	In progress, assigned to John Johansen
Bug #1677959: change_profile incorrect when using namespaces with a compound stack	CVE-2017-7308
AppArmor	New (unassigned)
Bug #1780534: Default usr.lib.ipsec.stroke profile causes segfault for 'ipsec status'	CVE-2018-16151 CVE-2018-16152 CVE-2018-17540
AppArmor	New (unassigned)

Resolved bugs

Bug	CVE(s)
Bug #789409: /proc/[PID]/attr/current overwrite Null pointer dereference	CVE-2011-0716 CVE-2011-1162 CVE-2011-1576 CVE-2011-1759 CVE-2011-1927 CVE-2011-2182 CVE-2011-2203 CVE-2011-2498 CVE-2011-2518 CVE-2011-3353 CVE-2011-3619 CVE-2011-4110 CVE-2011-4622 CVE-2012-0038 CVE-2012-0044
AppArmor	Fix released, assigned to Kees Cook
Bug #1236455: Running tasks are not subject to reloaded policies	CVE-2013-2929
AppArmor	Fix released (unassigned)
Bug #1590561: webbrowser-app crashes on startup on fresh zesty Unity8: No suitable EGL configs found	CVE-2017-6507
AppArmor	Fix released, assigned to Olivier Tilloy
Bug #1597017: mount rules grant excessive permissions	CVE-2016-1585
AppArmor	Fix released (unassigned)
Bug #1634753: srcname from mount rule corrupted under load	CVE-2016-5195 CVE-2016-7425 CVE-2016-8658
AppArmor	Invalid by John Johansen
Bug #1668892: CVE-2017-6507: apparmor service restarts and package upgrades unload privately managed profiles	CVE-2017-6507
AppArmor	Fix released, assigned to juan serven
Bug #1824812: apparmor does not start in Disco LXD containers	CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-3620 CVE-2018-3639 CVE-2018-3646 CVE-2019-11683 CVE-2019-1999 CVE-2019-3874 CVE-2019-3882 CVE-2019-3887 CVE-2019-9500 CVE-2019-9503
AppArmor	Fix released (unassigned)
Bug #2016908: udev fails to make prctl() syscall with apparmor=0 (as used by maas by default)	CVE-2023-1380 CVE-2023-2612 CVE-2023-30456 CVE-2023-31436 CVE-2023-32233
AppArmor	Fix released (unassigned)