CVE-2014-1424: Medium severity suse libapparmor1 vulnerability
Published Nov 24, 2014
·Updated
apparmorparser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw."
Affected Software
2 affected components
Ubuntu apparmor<=2.8.94-0ubuntu1.4
Canonical Ubuntu=14.04
Remediation
Patch Available
Event History
Nov 24, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-1424?
CVE-2014-1424 has a medium severity rating due to its potential to allow attackers to bypass security policies.
2
How do I fix CVE-2014-1424?
To fix CVE-2014-1424, upgrade the apparmor package to version 2.8.95~2430-0ubuntu5.1 or later.
3
What platforms are affected by CVE-2014-1424?
CVE-2014-1424 affects Ubuntu 14.04 systems with apparmor versions prior to 2.8.95~2430-0ubuntu5.1.
4
Can CVE-2014-1424 lead to unauthorized access?
Yes, CVE-2014-1424 can lead to unauthorized access by allowing attackers to bypass AppArmor security policies.
5
Is there a known exploit for CVE-2014-1424?
There is no public exploit for CVE-2014-1424, but the vulnerability itself poses a significant risk if left unpatched.