CVE-2024-8038

Go/github.com/juju/juju CVE-2024-8038: high 7.9

Vulnerable juju introspection abstract UNIX domain socket

Action: Upgrade github.com/juju/juju to 0.0.0-20240829052008-43f0fc59790d or later.

go get github.com/juju/juju@v0.0.0-20240829052008-43f0fc59790d

Affected

Fixed versions

Sources

• osv: GHSA-xwgj-vpm9-q2rq
• https://github.com/juju/juju/security/advisories/GHSA-xwgj-vpm9-q2rq
• https://nvd.nist.gov/vuln/detail/CVE-2024-8038
• https://github.com/juju/juju/commit/43f0fc59790d220a457d4d305f484f62be556d3b
• https://github.com/juju/juju
• https://github.com/juju/juju/blob/725800953aaa29dbeda4f806097bf838e61644dd/worker/introspection/worker.go#L125
• https://pkg.go.dev/vuln/GO-2024-3175

CVE-2024-8038 · published 2024-10-03T16:53:26Z · modified 2024-10-09T22:49:20Z · JSON

Go/github.com/juju/juju CVE-2024-8038: medium 5.5

Vulnerable juju introspection abstract UNIX domain socket in github.com/juju/juju

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-3175
• nvd: CVE-2024-8038
• https://github.com/juju/juju/security/advisories/GHSA-xwgj-vpm9-q2rq
• https://github.com/juju/juju/commit/43f0fc59790d220a457d4d305f484f62be556d3b
• https://github.com/juju/juju/blob/725800953aaa29dbeda4f806097bf838e61644dd/worker/introspection/worker.go#L125

CVE-2024-8038 · published 2024-10-09T20:29:23Z · modified 2024-10-09T20:59:10.482687Z · JSON