CVE-2024-8038CWE-420

Vulnerable juju introspection abstract UNIX domain socket

High · published October 2, 2024

CVSS v3.1
7.9
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.

The record
Technical detail
CVSS v3.1
7.9 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00212 · 10.9th percentile
Weakness
CWE-420 · Unprotected Alternate Channel
Published
2024-10-02T10:12Z
EPSS history
Timeline
  • 02 OCT 10:12Z
    Vulnerable juju introspection abstract UNIX domain socket
    cvelistv5