{"id":"CVE-2016-1585","aliases":["ALPINE-CVE-2016-1585","AZL-6306","BELL-CVE-2016-1585","DEBIAN-CVE-2016-1585","EUVD-2016-2680","GHSA-gpv3-8hmx-cqqf","ROOT-OS-DEBIAN-12-CVE-2016-1585","UBUNTU-CVE-2016-1585","USN-7035-1","openSUSE-SU-2024:12971-1"],"status":"published","title":"AppArmor mount rules grant excessive permissions","description":"In all versions of AppArmor mount rules are accidentally widened when compiled.","severity":{"version":"3.0","score":3.9,"vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01034,"percentile":0.64073,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2019-04-22T15:35:59Z","modified":"2026-10-24T10:30:35Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"apparmor","fixed_in":["3.1.7-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"apparmor","fixed_in":["2.13-16"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"apparmor","fixed_in":["3.1.7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"apparmor","fixed_in":["3.1.6-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"apparmor","fixed_in":["3.0.12-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"apparmor","fixed_in":["3.0.12-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"apparmor","fixed_in":["3.0.8-3.root.io.1","3.0.8-3.aikido.2"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-apparmor","fixed_in":["3.0.8-3.root.io.1","3.0.8-3.aikido.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"apparmor","fixed_in":["2.13.3-7ubuntu5.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"apparmor","fixed_in":["3.0.4-2ubuntu2.4"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"apparmor","fixed_in":["3.1.4-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.7-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-16"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.2-r2"},{"fixed":"3.1.7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.3-r0"},{"fixed":"3.1.6-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.12-1","3.0.13-1","3.0.13-2","3.0.8-3","3.1.7-1","3.1.7-2","3.1.7-3","3.1.7-4","4.1.0-1","4.1.0~beta5-1","4.1.0~beta5-2","4.1.0~beta5-3","4.1.0~beta5-4","4.1.0~beta5-5","4.1.0~beta5-6","4.1.3-1","4.1.6-2","4.1.6-3","4.1.7-1","4.1.7-2","4.1.7-3","4.1.7-4","4.1.7-5","4.1.7-6","4.1.8-1","4.1.8-2","5.0.1-1","5.0.2-1","5.0.2-2","5.0.2-3","5.0.2-4"]},{"source":"osv","ecosystem":"Debian:13","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-1"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-3.root.io.1"},{"fixed":"3.0.8-3.aikido.2"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-3.root.io.1"},{"fixed":"3.0.8-3.aikido.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.0-0ubuntu31","2.8.0-0ubuntu32","2.8.0-0ubuntu33","2.8.0-0ubuntu34","2.8.0-0ubuntu35","2.8.0-0ubuntu37","2.8.0-0ubuntu38","2.8.95~2430-0ubuntu1","2.8.95~2430-0ubuntu2","2.8.95~2430-0ubuntu3","2.8.95~2430-0ubuntu5","2.8.95~2430-0ubuntu5.1","2.8.95~2430-0ubuntu5.2","2.8.95~2430-0ubuntu5.3","2.10.95-0ubuntu2.5~14.04.1","2.10.95-0ubuntu2.6~14.04.1","2.10.95-0ubuntu2.6~14.04.3","2.10.95-0ubuntu2.6~14.04.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10-0ubuntu6","2.10-0ubuntu7","2.10-0ubuntu8","2.10-0ubuntu10","2.10-0ubuntu11","2.10-0ubuntu12","2.10-3ubuntu1","2.10-3ubuntu2","2.10.95-0ubuntu1","2.10.95-0ubuntu2","2.10.95-0ubuntu2.2","2.10.95-0ubuntu2.5","2.10.95-0ubuntu2.6","2.10.95-0ubuntu2.7","2.10.95-0ubuntu2.8","2.10.95-0ubuntu2.9","2.10.95-0ubuntu2.10","2.10.95-0ubuntu2.11","2.10.95-0ubuntu2.12"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.11.0-2ubuntu17","2.11.0-2ubuntu18","2.11.0-2ubuntu19","2.12-4ubuntu1","2.12-4ubuntu2","2.12-4ubuntu3","2.12-4ubuntu4","2.12-4ubuntu5","2.12-4ubuntu5.1","2.12-4ubuntu5.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-7ubuntu5.4"}]}],"versions":["2.13.3-5ubuntu1","2.13.3-5ubuntu2","2.13.3-5ubuntu5","2.13.3-7ubuntu1","2.13.3-7ubuntu2","2.13.3-7ubuntu3","2.13.3-7ubuntu4","2.13.3-7ubuntu5","2.13.3-7ubuntu5.1","2.13.3-7ubuntu5.2","2.13.3-7ubuntu5.3","2.13.3-7ubuntu5.3build2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-2ubuntu2.4"}]}],"versions":["3.0.3-0ubuntu1","3.0.3-0ubuntu2","3.0.3-0ubuntu3","3.0.3-0ubuntu4","3.0.3-0ubuntu5","3.0.4-1ubuntu1","3.0.4-2ubuntu1","3.0.4-2ubuntu2","3.0.4-2ubuntu2.1","3.0.4-2ubuntu2.2","3.0.4-2ubuntu2.3","3.0.4-2ubuntu2.3build2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-7ubuntu5.4"}]}],"versions":["2.13.3-5ubuntu1","2.13.3-5ubuntu2","2.13.3-5ubuntu5","2.13.3-7ubuntu1","2.13.3-7ubuntu2","2.13.3-7ubuntu3","2.13.3-7ubuntu4","2.13.3-7ubuntu5","2.13.3-7ubuntu5.1","2.13.3-7ubuntu5.2","2.13.3-7ubuntu5.3","2.13.3-7ubuntu5.3build2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-2ubuntu2.4"}]}],"versions":["3.0.3-0ubuntu1","3.0.3-0ubuntu2","3.0.3-0ubuntu3","3.0.3-0ubuntu4","3.0.3-0ubuntu5","3.0.4-1ubuntu1","3.0.4-2ubuntu1","3.0.4-2ubuntu2","3.0.4-2ubuntu2.1","3.0.4-2ubuntu2.2","3.0.4-2ubuntu2.3","3.0.4-2ubuntu2.3build2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-1.1"}]}]}],"products":[{"vendor":"apparmor","product":"apparmor"},{"vendor":"canonical","product":"apparmor"}],"references":[{"url":"https://bugs.launchpad.net/apparmor/+bug/1597017","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1585","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-gpv3-8hmx-cqqf"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-1585","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2016-1585","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/advisories/BELL-SA-2024-15","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-1585","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-1585","tags":["report"]},{"url":"https://gitlab.com/apparmor/apparmor/-/merge_requests/333","tags":["report"]},{"url":"https://gitlab.com/apparmor/apparmor/-/merge_requests/1048","tags":["report"]},{"url":"https://gitlab.com/apparmor/apparmor/-/merge_requests/1054","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1585","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7035-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1585","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-1585","title":"AppArmor mount rules grant excessive permissions","description":"In all versions of AppArmor mount rules are accidentally widened when compiled.","status":"published","published":"2019-04-22T15:35:59.573Z","modified":"2024-09-16T23:36:50.974Z","cvss":[{"version":"3.0","score":3.9,"vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","level":"low","assessor":"cna"}],"updated_at":"2026-11-02T14:33:35.841056Z"}],"euvd":[{"id":"EUVD-2016-2680","description":"In all versions of AppArmor mount rules are accidentally widened when compiled.","status":"published","published":"2019-04-22T15:35:59Z","modified":"2024-09-16T23:36:50Z","cvss":[{"version":"3.0","score":3.9,"vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","level":"low"}],"updated_at":"2026-11-03T00:54:48.722382Z"}],"ghsa":[{"id":"GHSA-gpv3-8hmx-cqqf","title":"In all versions of AppArmor mount rules are accidentally widened when compiled.","description":"In all versions of AppArmor mount rules are accidentally widened when compiled.","status":"published","published":"2022-05-24T16:44:07Z","modified":"2024-04-04T00:03:20Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:55:48.925076Z"}],"nvd":[{"id":"CVE-2016-1585","description":"In all versions of AppArmor mount rules are accidentally widened when compiled.","status":"published","published":"2019-04-22T16:29:01.303Z","modified":"2026-06-17T00:42:13.023Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.0","score":3.9,"vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","level":"low","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:03:39.621168Z"}],"osv":[{"id":"ALPINE-CVE-2016-1585","description":"In all versions of AppArmor mount rules are accidentally widened when compiled.","status":"published","published":"2019-04-22T16:29:01.303Z","modified":"2026-09-22T06:17:50.315198197Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"AZL-6306","title":"CVE-2016-1585 affecting package apparmor for versions less than 2.13-16","description":"In all versions of AppArmor mount rules are accidentally widened when compiled.","status":"published","published":"2019-04-22T16:29:01Z","modified":"2026-04-21T04:32:07.873974Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"BELL-CVE-2016-1585","status":"published","published":"2019-04-22T16:29:00Z","modified":"2026-01-26T09:28:19.023975Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2016-1585","description":"In all versions of AppArmor mount rules are accidentally widened when compiled.","status":"published","published":"2019-04-22T16:29:01.303Z","modified":"2026-10-24T10:30:35.678892334Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:02.114472Z"},{"id":"DEBIAN-CVE-2016-1585","description":"In all versions of AppArmor mount rules are accidentally widened when compiled.","status":"published","published":"2019-04-22T16:29:01.303Z","modified":"2026-09-22T07:01:11.881484308Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"UBUNTU-CVE-2016-1585","description":"In all versions of AppArmor mount rules are accidentally widened when compiled.","status":"published","published":"2019-04-22T16:29:00Z","modified":"2026-04-22T10:31:09.700661Z","cvss":[{"version":"3.0","score":3.9,"vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","level":"low"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:11.492576Z"},{"id":"openSUSE-SU-2024:12971-1","title":"apache2-mod_apparmor-3.1.4-1.1 on GA media","description":"These are all security issues fixed in the apache2-mod_apparmor-3.1.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:29:33.719071Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2016-1585","title":"CVE-2016-1585 in apparmor - Patched by Root","description":"Root has patched CVE-2016-1585 in the apparmor package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T08:29:37Z","modified":"2026-08-26T01:11:03.66889609Z","updated_at":"2026-11-02T15:53:30.44348Z"},{"id":"USN-7035-1","title":"apparmor vulnerability","description":"It was discovered that the AppArmor policy compiler incorrectly generated\nlooser restrictions than expected for rules allowing mount operations. A\nlocal attacker could possibly use this to bypass AppArmor restrictions in\napplications where some mount operations were permitted.\n","status":"published","published":"2024-09-25T22:21:37Z","modified":"2026-04-27T17:30:06.141415Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}