CVE-2017-6507

An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have increased attack surfaces of processes that were intended to be confined by AppArmor. This is due to the common logic to handle 'restart' operations removing AppArmor profiles that aren't found in the typical filesystem locations, such as /etc/apparmor.d/. Userspace projects that manage their own AppArmor profiles in atypical directories, such as what's done by LXD and Docker, are affected by this flaw in the AppArmor init script logic.

• CWE-269

• http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/revision/3647Issue Tracking, Patch, Third Party Advisory
• http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/revision/3648Issue Tracking, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/97223
• https://bugs.launchpad.net/apparmor/+bug/1668892Issue Tracking, Patch, Third Party Advisory
• https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-6507.htmlThird Party Advisory
• http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/revision/3647Issue Tracking, Patch, Third Party Advisory
• http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/revision/3648Issue Tracking, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/97223
• https://bugs.launchpad.net/apparmor/+bug/1668892Issue Tracking, Patch, Third Party Advisory
• https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-6507.htmlThird Party Advisory

Published

Mar 24, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6501An issue was discovered in ImageMagick 6.9.7. A specially cr…
• CVE-2017-6502An issue was discovered in ImageMagick 6.9.7. A specially cr…
• CVE-2017-6503WebUI in qBittorrent before 3.3.11 did not escape many value…
• CVE-2017-6504WebUI in qBittorrent before 3.3.11 did not set the X-Frame-O…
• CVE-2017-6505The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QE…6.5
• CVE-2017-6506In Azure Data Expert Ultimate 2.2.16, the SMTP verification …
• CVE-2017-6508CRLF injection vulnerability in the url_parse function in ur…
• CVE-2017-6509Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a re…
• CVE-2017-6510Easy File Sharing FTP Server version 3.6 is vulnerable to a …
• CVE-2017-6511andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflect…6.1
• CVE-2017-6512Race condition in the rmtree and remove_tree functions in th…5.9
• CVE-2017-6513The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizo…