CVE-2024-8038

published 2024-10-02

CVE-2024-8038: Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication…

Priority P4 20 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
canonical	juju	< 2.9.51	2.9.51
canonical	juju	>= 3.1.0 < 3.1.10	3.1.10
canonical	juju	3.2.0 – 3.2.4	—
canonical	juju	>= 3.3 < 3.3.7	3.3.7
canonical	juju	>= 3.4 < 3.4.6	3.4.6
canonical	juju	>= 3.5.0 < 3.5.4	3.5.4
canonical_ltd	juju	>= 2.9 < 2.9.51	2.9.51
canonical_ltd	juju	>= 3.1 < 3.1.10	3.1.10
canonical_ltd	juju	>= 3.3 < 3.3.7	3.3.7
canonical_ltd	juju	>= 3.4 < 3.4.6	3.4.6
canonical_ltd	juju	>= 3.5 < 3.5.4	3.5.4
github.com	juju_juju	>= 0 < 0.0.0-20240829052008-43f0fc59790d	0.0.0-20240829052008-43f0fc59790d

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-420