Skip to content
Sign in
7.9 High

CVE-2024-8038 Vulnerable juju introspection abstract UNIX domain socket

Description

Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.

Affected products and versions

Product Affected versions Fixed in
Juju 3.5 3.5 → < 3.5.4 3.5.4
Juju 3.4 3.4 → < 3.4.6 3.4.6
Juju 3.3 3.3 → < 3.3.7 3.3.7
Juju 3.1 3.1 → < 3.1.10 3.1.10
Juju 2.9 2.9 → < 2.9.51 2.9.51

Other CVEs of Juju

The 5 CVEs of Juju →
CVE-2023-0092 An authenticated user who has read access to the juju controller model, may construct a remote request to download an… 4.9 Medium CVE-2024-8037 Vulnerable juju hook tool abstract UNIX domain socket 6.5 Medium CVE-2024-7558 JUJU_CONTEXT_ID is a predictable authentication secret 8.7 High CVE-2024-6984 An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged… 8.8 High
Track this CVE