{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T02:50:29.486","vulnerabilities":[{"cve":{"id":"CVE-2024-8037","sourceIdentifier":"security@ubuntu.com","published":"2024-10-02T11:15:11.690","lastModified":"2026-06-17T08:21:44.260","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerable juju hook tool abstract UNIX domain socket. When combined with an attack of JUJU_CONTEXT_ID, any user on the local system with access to the default network namespace may connect to the @/var/lib/juju/agents/unit-xxxx-yyyy/agent.socket and perform actions that are normally reserved to a juju charm."},{"lang":"es","value":"Herramienta de gancho Juju vulnerable que abstrae el socket de dominio UNIX. Cuando se combina con un ataque de JUJU_CONTEXT_ID, cualquier usuario del sistema local con acceso al espacio de nombres de red predeterminado puede conectarse al @/var/lib/juju/agents/unit-xxxx-yyyy/agent.socket y realizar acciones que normalmente están reservadas a un encanto Juju."}],"affected":[{"source":"security@ubuntu.com","affectedData":[{"vendor":"Canonical Ltd.","product":"Juju","packageName":"juju","platforms":["Linux"],"repo":"https://github.com/juju/juju","versions":[{"version":"3.5","lessThan":"3.5.4","versionType":"semver","status":"affected"},{"version":"3.4","lessThan":"3.4.6","versionType":"semver","status":"affected"},{"version":"3.3","lessThan":"3.3.7","versionType":"semver","status":"affected"},{"version":"3.1","lessThan":"3.1.10","versionType":"semver","status":"affected"},{"version":"2.9","lessThan":"2.9.51","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@ubuntu.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-02T13:56:28.477251Z","id":"CVE-2024-8037","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-276"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*","versionEndExcluding":"2.9.51","matchCriteriaId":"956F1957-34C5-47D9-B922-107963295A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.10","matchCriteriaId":"32122910-827A-438E-B1DD-42C8E24D7F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.2.4","matchCriteriaId":"BA2EB481-D7FF-4A83-B7ED-A6FCE9AE1029"},{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.7","matchCriteriaId":"90FAD9A5-A5B3-4C53-B609-7BD399F4F6ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4","versionEndExcluding":"3.4.6","matchCriteriaId":"6693CCDC-308E-40B3-BC8A-F9A2320A06F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.4","matchCriteriaId":"62BC59FA-04DB-4AC3-977D-691ED721171F"}]}]}],"references":[{"url":"https://github.com/juju/juju/security/advisories/GHSA-8v4w-f4r9-7h6x","source":"security@ubuntu.com","tags":["Patch","Vendor Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-8037","source":"security@ubuntu.com","tags":["Third Party Advisory"]}]}}]}