Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.
The product protects a primary channel, but it does not use the same level of protection for an alternate channel.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Juju | Canonical | * | 2.9.51 (excluding) |
| Juju | Canonical | 3.1.0 (including) | 3.1.10 (excluding) |
| Juju | Canonical | 3.2.0 (including) | 3.2.4 (including) |
| Juju | Canonical | 3.3 (including) | 3.3.7 (excluding) |
| Juju | Canonical | 3.4 (including) | 3.4.6 (excluding) |
| Juju | Canonical | 3.5.0 (including) | 3.5.4 (excluding) |
| Juju | Ubuntu | snap | * |
| Juju | Ubuntu | upstream | * |