CVE-2018-6553

AppArmor cupsd Sandbox Bypass Due to Use of Hard Links

published August 10, 2018

CVSS
—
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.1th percentile
Published
2018-08-10T15:00Z
EPSS history
Timeline
  • 10 AUG 15:00Z
    AppArmor cupsd Sandbox Bypass Due to Use of Hard Links
    cvelistv5