Description (CNA)
Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Canonical Ltd. / Juju | affected 3.5 before 3.5.4; affected 3.4 before 3.4.6; affected 3.3 before 3.3.7; affected 3.1 before 3.1.10; affected 2.9 before 2.9.51 |
CWE
CWE-420
References
- https://github.com/juju/juju/security/advisories/GHSA-xwgj-vpm9-q2rq
- https://www.cve.org/CVERecord?id=CVE-2024-8038
ADP enrichment
No English description supplied.
No references supplied.