What’s Vulnerable › Vulnerabilities

CVE-2017-9232

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 48.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-05-28 · updated 2026-06-17
• Weakness: CWE-862

Description

Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.

Affected products

• Canonical Juju: through 1.25.12; 2.0.0, 2.0.0-alpha1, 2.0.0-alpha2, 2.0.0-beta1, 2.0.0-beta10, 2.0.0-beta11 (+31)

References

• http://www.securityfocus.com/bid/98737
• https://bugs.launchpad.net/juju/+bug/1682411
• https://www.exploit-db.com/exploits/44023/
• http://www.securityfocus.com/bid/98737
• https://bugs.launchpad.net/juju/+bug/1682411
• https://www.exploit-db.com/exploits/44023/

Get alerted when CVE-2017-9232 or the next vulnerability affects your stack