CVE Vulnerabilities

CVE-2024-8038

Unprotected Alternate Channel

Published: Oct 02, 2024 | Modified: Oct 02, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.

Weakness

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

Affected Software

Name Vendor Start Version End Version
Juju Ubuntu snap *
Juju Ubuntu upstream *

Potential Mitigations

References