VULNERABILITY INTELLIGENCE
CVE-2024-8038
CVSS score7.9 HIGH
EPSS probability0.21%
CISA KEVNot currently listed
Published2024-10-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
Description
Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.
Weakness classification
- security@ubuntu.com: CWE-420
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- security@ubuntu.com — Patch, Vendor Advisory
- security@ubuntu.com — Third Party Advisory