Aller au contenu
Se connecter
7.9 Élevée

CVE-2024-8038 Vulnerable juju introspection abstract UNIX domain socket

Description

Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.

Produits et versions touchés

Produit Versions touchées Corrigé en
Juju 3.5 3.5 → < 3.5.4 3.5.4
Juju 3.4 3.4 → < 3.4.6 3.4.6
Juju 3.3 3.3 → < 3.3.7 3.3.7
Juju 3.1 3.1 → < 3.1.10 3.1.10
Juju 2.9 2.9 → < 2.9.51 2.9.51

Autres CVE de Juju

Les 5 CVE de Juju →
CVE-2023-0092 An authenticated user who has read access to the juju controller model, may construct a remote request to download an… 4.9 Moyenne CVE-2024-8037 Vulnerable juju hook tool abstract UNIX domain socket 6.5 Moyenne CVE-2024-7558 JUJU_CONTEXT_ID is a predictable authentication secret 8.7 Élevée CVE-2024-6984 An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged… 8.8 Élevée
Suivre cette CVE