{"id":"UBUNTU-CVE-2016-1585","details":"In all versions of AppArmor mount rules are accidentally widened when compiled.","modified":"2026-04-22T10:53:45.760637Z","published":"2019-04-22T16:29:00Z","related":["USN-7035-1"],"upstream":["CVE-2016-1585"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2016-1585"},{"type":"REPORT","url":"https://gitlab.com/apparmor/apparmor/-/merge_requests/333"},{"type":"REPORT","url":"https://gitlab.com/apparmor/apparmor/-/merge_requests/1048"},{"type":"REPORT","url":"https://gitlab.com/apparmor/apparmor/-/merge_requests/1054"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2016-1585"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-7035-1"}],"affected":[{"package":{"name":"apparmor","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/apparmor@2.10.95-0ubuntu2.6~14.04.4?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.0-0ubuntu31","2.8.0-0ubuntu32","2.8.0-0ubuntu33","2.8.0-0ubuntu34","2.8.0-0ubuntu35","2.8.0-0ubuntu37","2.8.0-0ubuntu38","2.8.95~2430-0ubuntu1","2.8.95~2430-0ubuntu2","2.8.95~2430-0ubuntu3","2.8.95~2430-0ubuntu5","2.8.95~2430-0ubuntu5.1","2.8.95~2430-0ubuntu5.2","2.8.95~2430-0ubuntu5.3","2.10.95-0ubuntu2.5~14.04.1","2.10.95-0ubuntu2.6~14.04.1","2.10.95-0ubuntu2.6~14.04.3","2.10.95-0ubuntu2.6~14.04.4"],"ecosystem_specific":{"binaries":[{"binary_name":"apparmor","binary_version":"2.10.95-0ubuntu2.6~14.04.4"},{"binary_name":"apparmor-docs","binary_version":"2.10.95-0ubuntu2.6~14.04.4"},{"binary_name":"apparmor-easyprof","binary_version":"2.10.95-0ubuntu2.6~14.04.4"},{"binary_version":"2.10.95-0ubuntu2.6~14.04.4","binary_name":"apparmor-notify"},{"binary_version":"2.10.95-0ubuntu2.6~14.04.4","binary_name":"apparmor-profiles"},{"binary_name":"apparmor-utils","binary_version":"2.10.95-0ubuntu2.6~14.04.4"},{"binary_name":"dh-apparmor","binary_version":"2.10.95-0ubuntu2.6~14.04.4"},{"binary_name":"libapache2-mod-apparmor","binary_version":"2.10.95-0ubuntu2.6~14.04.4"},{"binary_name":"libapparmor-perl","binary_version":"2.10.95-0ubuntu2.6~14.04.4"},{"binary_name":"libapparmor1","binary_version":"2.10.95-0ubuntu2.6~14.04.4"},{"binary_name":"libpam-apparmor","binary_version":"2.10.95-0ubuntu2.6~14.04.4"},{"binary_name":"python-apparmor","binary_version":"2.10.95-0ubuntu2.6~14.04.4"},{"binary_name":"python-libapparmor","binary_version":"2.10.95-0ubuntu2.6~14.04.4"},{"binary_name":"python3-apparmor","binary_version":"2.10.95-0ubuntu2.6~14.04.4"},{"binary_name":"python3-libapparmor","binary_version":"2.10.95-0ubuntu2.6~14.04.4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-1585.json"}},{"package":{"name":"apparmor","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/apparmor@2.10.95-0ubuntu2.12?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10-0ubuntu6","2.10-0ubuntu7","2.10-0ubuntu8","2.10-0ubuntu10","2.10-0ubuntu11","2.10-0ubuntu12","2.10-3ubuntu1","2.10-3ubuntu2","2.10.95-0ubuntu1","2.10.95-0ubuntu2","2.10.95-0ubuntu2.2","2.10.95-0ubuntu2.5","2.10.95-0ubuntu2.6","2.10.95-0ubuntu2.7","2.10.95-0ubuntu2.8","2.10.95-0ubuntu2.9","2.10.95-0ubuntu2.10","2.10.95-0ubuntu2.11","2.10.95-0ubuntu2.12"],"ecosystem_specific":{"binaries":[{"binary_name":"apparmor","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"apparmor-docs","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"apparmor-easyprof","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"apparmor-notify","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"apparmor-profiles","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"apparmor-utils","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"dh-apparmor","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"libapache2-mod-apparmor","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"libapparmor-perl","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"libapparmor1","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"libpam-apparmor","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"python-apparmor","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"python-libapparmor","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"python3-apparmor","binary_version":"2.10.95-0ubuntu2.12"},{"binary_name":"python3-libapparmor","binary_version":"2.10.95-0ubuntu2.12"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-1585.json"}},{"package":{"name":"apparmor","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/apparmor@2.12-4ubuntu5.3?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.11.0-2ubuntu17","2.11.0-2ubuntu18","2.11.0-2ubuntu19","2.12-4ubuntu1","2.12-4ubuntu2","2.12-4ubuntu3","2.12-4ubuntu4","2.12-4ubuntu5","2.12-4ubuntu5.1","2.12-4ubuntu5.3"],"ecosystem_specific":{"binaries":[{"binary_name":"apparmor","binary_version":"2.12-4ubuntu5.3"},{"binary_name":"apparmor-easyprof","binary_version":"2.12-4ubuntu5.3"},{"binary_version":"2.12-4ubuntu5.3","binary_name":"apparmor-notify"},{"binary_name":"apparmor-profiles","binary_version":"2.12-4ubuntu5.3"},{"binary_version":"2.12-4ubuntu5.3","binary_name":"apparmor-utils"},{"binary_name":"dh-apparmor","binary_version":"2.12-4ubuntu5.3"},{"binary_name":"libapache2-mod-apparmor","binary_version":"2.12-4ubuntu5.3"},{"binary_name":"libapparmor-perl","binary_version":"2.12-4ubuntu5.3"},{"binary_name":"libapparmor1","binary_version":"2.12-4ubuntu5.3"},{"binary_name":"libpam-apparmor","binary_version":"2.12-4ubuntu5.3"},{"binary_version":"2.12-4ubuntu5.3","binary_name":"python-apparmor"},{"binary_name":"python-libapparmor","binary_version":"2.12-4ubuntu5.3"},{"binary_name":"python3-apparmor","binary_version":"2.12-4ubuntu5.3"},{"binary_name":"python3-libapparmor","binary_version":"2.12-4ubuntu5.3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-1585.json"}},{"package":{"name":"apparmor","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/apparmor@2.13.3-7ubuntu5.4?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-7ubuntu5.4"}]}],"versions":["2.13.3-5ubuntu1","2.13.3-5ubuntu2","2.13.3-5ubuntu5","2.13.3-7ubuntu1","2.13.3-7ubuntu2","2.13.3-7ubuntu3","2.13.3-7ubuntu4","2.13.3-7ubuntu5","2.13.3-7ubuntu5.1","2.13.3-7ubuntu5.2","2.13.3-7ubuntu5.3","2.13.3-7ubuntu5.3build2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"2.13.3-7ubuntu5.4","binary_name":"apparmor"},{"binary_name":"apparmor-easyprof","binary_version":"2.13.3-7ubuntu5.4"},{"binary_name":"apparmor-notify","binary_version":"2.13.3-7ubuntu5.4"},{"binary_name":"apparmor-profiles","binary_version":"2.13.3-7ubuntu5.4"},{"binary_name":"apparmor-utils","binary_version":"2.13.3-7ubuntu5.4"},{"binary_name":"dh-apparmor","binary_version":"2.13.3-7ubuntu5.4"},{"binary_name":"libapache2-mod-apparmor","binary_version":"2.13.3-7ubuntu5.4"},{"binary_version":"2.13.3-7ubuntu5.4","binary_name":"libapparmor-perl"},{"binary_name":"libapparmor1","binary_version":"2.13.3-7ubuntu5.4"},{"binary_name":"libpam-apparmor","binary_version":"2.13.3-7ubuntu5.4"},{"binary_version":"2.13.3-7ubuntu5.4","binary_name":"python3-apparmor"},{"binary_name":"python3-libapparmor","binary_version":"2.13.3-7ubuntu5.4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-1585.json"}},{"package":{"name":"apparmor","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/apparmor@3.0.4-2ubuntu2.4?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-2ubuntu2.4"}]}],"versions":["3.0.3-0ubuntu1","3.0.3-0ubuntu2","3.0.3-0ubuntu3","3.0.3-0ubuntu4","3.0.3-0ubuntu5","3.0.4-1ubuntu1","3.0.4-2ubuntu1","3.0.4-2ubuntu2","3.0.4-2ubuntu2.1","3.0.4-2ubuntu2.2","3.0.4-2ubuntu2.3","3.0.4-2ubuntu2.3build2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"apparmor","binary_version":"3.0.4-2ubuntu2.4"},{"binary_name":"apparmor-notify","binary_version":"3.0.4-2ubuntu2.4"},{"binary_name":"apparmor-profiles","binary_version":"3.0.4-2ubuntu2.4"},{"binary_name":"apparmor-utils","binary_version":"3.0.4-2ubuntu2.4"},{"binary_name":"dh-apparmor","binary_version":"3.0.4-2ubuntu2.4"},{"binary_name":"libapache2-mod-apparmor","binary_version":"3.0.4-2ubuntu2.4"},{"binary_name":"libapparmor1","binary_version":"3.0.4-2ubuntu2.4"},{"binary_name":"libpam-apparmor","binary_version":"3.0.4-2ubuntu2.4"},{"binary_name":"python3-apparmor","binary_version":"3.0.4-2ubuntu2.4"},{"binary_name":"python3-libapparmor","binary_version":"3.0.4-2ubuntu2.4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-1585.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}