CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2024-8038
Medium (5.5) in canonical juju. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in github.com/juju/juju 0.0.0-20240829052008-43f0fc59790d.
Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
- CWE
- CWE-420
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:juju
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-xwgj-vpm9-q2rq | Go | github.com/juju/juju | <0.0.0-20240829052008-43f0fc59790d | 0.0.0-20240829052008-43f0fc59790d |
| GO-2024-3175 | Go | github.com/juju/juju | all versions | no fix published |