CVE-2017-9232
critical · 9.8Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.
9.8
CVSS
48.5%
EPSS (exploit prob.)
99th
EPSS percentile
2017-05-28
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-862
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| canonical | juju | <= 1.25.12 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.0 |
| canonical | juju | 2.0.1 |
| canonical | juju | 2.0.2 |
| canonical | juju | 2.0.3 |
| canonical | juju | 2.1.0 |
| canonical | juju | 2.1.0 |
| canonical | juju | 2.1.0 |
| canonical | juju | 2.1.0 |
| canonical | juju | 2.1.0 |
| canonical | juju | 2.1.0 |
| canonical | juju | 2.1.0 |
| canonical | juju | 2.1.0 |
| canonical | juju | 2.1.1 |
| canonical | juju | 2.1.2 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2017-9232