Canonical Ubuntu Core vulnerabilities

4 CVEs affecting Canonical Ubuntu Core, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-6507, published 2017-03-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-6507, published 2017-03-24. Medium severity, CVSS 5.9. EPSS: 1.6% chance of exploitation in the next 30 days. An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have…
CVE-2016-1576, published 2016-05-02. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs filesystem on top…
CVE-2016-1575, published 2016-05-02. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid…
CVE-2015-8325, published 2016-05-01. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows…