CVE catalog
CVE-2017-9232
UBUNTU-CVE-2017-9232
- Severity
- Critical · CVSS 9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 48.50% · Oct 25, 2026
Ryan Beisner discovered juju did not set permissions on a Unix domain socket. A local attacker could use this flaw to gain administrative privileges.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | juju-core | 14.04 | 1.16.0-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.16.2-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.16.3-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.16.4-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.16.5-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.0-0ubuntu2 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.0-0ubuntu3 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.1-0ubuntu2 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.2-0ubuntu2 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.2-0ubuntu3 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.2-0ubuntu4 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.3-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.4-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.4-0ubuntu2 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.6-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.7-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.18.0-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.18.1-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.18.4+dfsg-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.20.11-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.22.6-0ubuntu1~14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.22.8-0ubuntu1~14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.24.7-0ubuntu1~14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.25.5-0ubuntu3~14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.25.6-0ubuntu1.14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.25.6-0ubuntu1.14.04.2 | fixed |
| Ubuntu | juju-core | 16.04 | 1.24.6-0ubuntu3 | vulnerable |
| Ubuntu | juju-core | 16.04 | 1.25.0-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 16.04 | 1.25.0-0ubuntu2 | vulnerable |
| Ubuntu | juju-core | 16.04 | 1.25.0-0ubuntu3 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0~beta4-0ubuntu2 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0~beta6-0ubuntu1.16.04.1 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0~beta7-0ubuntu1.16.04.1 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0~beta12-0ubuntu1.16.04.1 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0~beta15-0ubuntu2.16.04.1 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0.0-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0.2-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0.2-0ubuntu0.16.04.2 | fixed |
| Ubuntu | juju-core | 14.04 | 1.16.0-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.16.2-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.16.3-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.16.4-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.16.5-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.0-0ubuntu2 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.0-0ubuntu3 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.1-0ubuntu2 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.2-0ubuntu2 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.2-0ubuntu3 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.2-0ubuntu4 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.3-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.4-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.4-0ubuntu2 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.6-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.17.7-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.18.0-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.18.1-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.18.4+dfsg-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.20.11-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.22.6-0ubuntu1~14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.22.8-0ubuntu1~14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.24.7-0ubuntu1~14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.25.5-0ubuntu3~14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.25.6-0ubuntu1.14.04.1 | vulnerable |
| Ubuntu | juju-core | 14.04 | 1.25.6-0ubuntu1.14.04.2 | fixed |
| Ubuntu | juju-core | 16.04 | 1.24.6-0ubuntu3 | vulnerable |
| Ubuntu | juju-core | 16.04 | 1.25.0-0ubuntu1 | vulnerable |
| Ubuntu | juju-core | 16.04 | 1.25.0-0ubuntu2 | vulnerable |
| Ubuntu | juju-core | 16.04 | 1.25.0-0ubuntu3 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0~beta4-0ubuntu2 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0~beta6-0ubuntu1.16.04.1 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0~beta7-0ubuntu1.16.04.1 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0~beta12-0ubuntu1.16.04.1 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0~beta15-0ubuntu2.16.04.1 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0.0-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0.2-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | juju-core | 16.04 | 2.0.2-0ubuntu0.16.04.2 | fixed |
| Ubuntu | juju-core-1 | 16.04 | 1.25.4-0ubuntu5 | vulnerable |
| Ubuntu | juju-core-1 | 16.04 | 1.25.5-0ubuntu1 | vulnerable |
| Ubuntu | juju-core-1 | 16.04 | 1.25.5-0ubuntu3 | vulnerable |
| Ubuntu | juju-core-1 | 16.04 | 1.25.6-0ubuntu1.16.04.1 | vulnerable |
| Ubuntu | juju-core-1 | 16.04 | 1.25.6-0ubuntu1.16.04.2 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Ubuntu | juju-core | deb | 14.04 | 1.25.6-0ubuntu1.14.04.2 | Not reported | USN-3300-1 | Not reported |
| Ubuntu | juju-core | deb | 16.04 | 2.0.2-0ubuntu0.16.04.2 | Not reported | USN-3300-1 | Not reported |
| Ubuntu | juju-core | deb | 14.04 | 1.25.6-0ubuntu1.14.04.2 | Not reported | UBUNTU-CVE-2017-9232 | Not reported |
| Ubuntu | juju-core | deb | 16.04 | 2.0.2-0ubuntu0.16.04.2 | Not reported | UBUNTU-CVE-2017-9232 | Not reported |
| Ubuntu | juju-core-1 | deb | 16.04 | 1.25.6-0ubuntu1.16.04.2 | Not reported | UBUNTU-CVE-2017-9232 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: