- Description
- Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted responses.
- Source
- security@ubuntu.com
- NVD status
- Analyzed
- Products
- ubuntu_linux
CVSS 3.1
- Type
- Secondary
- Base score
- 3.3
- Impact score
- 1.4
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- Severity
- LOW
- security@ubuntu.com
- CWE-1284
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:*:*:*:*",
"matchCriteriaId": "62D1BEC7-1A71-4991-A1A5-0E3D282100EC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:25.10:*:*:*:*:*:*:*",
"matchCriteriaId": "68D562DD-F22D-4310-93C7-7DE817104CAC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:26.04:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB2642A-AA54-4949-A9FC-0E9673539350",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]