CVE-2024-8038highCWE-420

CVE-2024-8038: high-severity vulnerability in Canonical Ltd. Juju

Published

Follow this CVE+ Monitor Juju+ Monitor github.com/juju/juju

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.9epss 0.2%
Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
Affected products
Canonical Ltd. · Juju
Related CVEs — Canonical Ltd. Juju

In the same product, most dangerous first.

CVE-2023-0092MEDIUMCVE-2023-0092EPSS 0.6%CVE-2024-7558HIGHCVE-2024-7558EPSS 0.5%CVE-2024-6984HIGHCVE-2024-6984EPSS 0.4%CVE-2024-8037MEDIUMCVE-2024-8037EPSS 0.2%