CVE-2024-3250
2 advisories.
Go/github.com/canonical/pebble CVE-2024-3250: medium 6.5, EPSS 0.20%
Pebble service manager's file pull API allows access by any user
Action: Upgrade github.com/canonical/pebble to 1.1.1 or later.
go get github.com/canonical/pebble@v1.4.2go get github.com/canonical/pebble@v1.7.3go get github.com/canonical/pebble@v1.10.2go get github.com/canonical/pebble@v1.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0 | 1.4.2 | - |
| 1.5.0 | 1.7.3 | - |
| 1.8.0 | 1.10.2 | - |
| 0 | 1.1.1 | - |
Fixed versions
| 1.4.2 | 1.7.3 | 1.10.2 | 1.1.1 |
Sources
- osv: GHSA-4685-2x5r-65pj
- https://github.com/canonical/pebble/security/advisories/GHSA-4685-2x5r-65pj
- https://nvd.nist.gov/vuln/detail/CVE-2024-3250
- https://github.com/canonical/pebble/pull/406
- https://github.com/canonical/pebble/commit/4ca343d3889533143477e21c63867f2f3c3b5645
- https://github.com/canonical/pebble/commit/a5f6f062a11ea156697b854264385ff7e1985fd8
- https://github.com/canonical/pebble/commit/b8abd1ff0090f3e0749e81eb1fc3ea16ba95f514
- https://github.com/canonical/pebble/commit/cd326225b9b0be067da7d8858e2c912078cbbbd5
- https://github.com/canonical/pebble
- https://www.cve.org/CVERecord?id=CVE-2024-3250
CVE-2024-3250 · published · modified · JSON
Go/github.com/canonical/pebble CVE-2024-3250: unknown, EPSS 0.20%
Pebble service manager's file pull API allows access by any user in github.com/canonical/pebble
Action: Upgrade github.com/canonical/pebble to 1.1.1 or later.
go get github.com/canonical/pebble@v1.1.1go get github.com/canonical/pebble@v1.4.2go get github.com/canonical/pebble@v1.7.3go get github.com/canonical/pebble@v1.10.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.1 | - |
| 1.2.0 | 1.4.2 | - |
| 1.5.0 | 1.7.3 | - |
| 1.8.0 | 1.10.2 | - |
Fixed versions
| 1.1.1 | 1.4.2 | 1.7.3 | 1.10.2 |
Sources
- osv: GO-2024-2692
- https://github.com/canonical/pebble/security/advisories/GHSA-4685-2x5r-65pj
- https://nvd.nist.gov/vuln/detail/CVE-2024-3250
- https://www.cve.org/CVERecord?id=CVE-2024-3250
- https://github.com/canonical/pebble/commit/4ca343d3889533143477e21c63867f2f3c3b5645
- https://github.com/canonical/pebble/commit/a5f6f062a11ea156697b854264385ff7e1985fd8
- https://github.com/canonical/pebble/commit/b8abd1ff0090f3e0749e81eb1fc3ea16ba95f514
- https://github.com/canonical/pebble/commit/cd326225b9b0be067da7d8858e2c912078cbbbd5
- https://github.com/canonical/pebble/pull/406
CVE-2024-3250 · published · modified · JSON