Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.
Weakness
The product protects a primary channel, but it does not use the same level of protection for an alternate channel.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Juju | Canonical | * | 2.9.51 (excluding) |
| Juju | Canonical | 3.1.0 (including) | 3.1.10 (excluding) |
| Juju | Canonical | 3.2.0 (including) | 3.2.4 (including) |
| Juju | Canonical | 3.3 (including) | 3.3.7 (excluding) |
| Juju | Canonical | 3.4 (including) | 3.4.6 (excluding) |
| Juju | Canonical | 3.5.0 (including) | 3.5.4 (excluding) |
| Juju | Ubuntu | snap | * |
| Juju | Ubuntu | upstream | * |