CVE-2017-9232 in the critical feed json
Juju uses a UNIX domain socket without setting appropriate permissions
published 2017-05-28 9 y ago modified 2026-06-17 4 mo ago also GHSA-j3hp-pv6v-rgrx , GO-2025-3639 , EUVD-2017-18170
- cvss
- 9.8
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 48.5%
- EPSS 48.5% chance of exploitation in 30 days, percentile 98%
- public exploits
- 2
- Metasploit, Exploit-DB
Summary
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.
Patch / fix
- go github.com/juju/juju 0.0.0-20170524231039-0417178a3c28
- juju-core Ubuntu 14.04 LTS 1.25.6-0ubuntu1.14.04.2
- juju-core Ubuntu 16.04 LTS 2.0.2-0ubuntu0.16.04.2
- juju-core-1 Ubuntu 16.04 LTS 1.25.6-0ubuntu1.16.04.2
ubuntu advisories UBUNTU-CVE-2017-9232
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- govulncheck-vulndb openSUSE Tumbleweed 0.0.20250424T181457-1.1
opensuse advisories openSUSE-SU-2025:15033-1
- github.com/juju/juju@0417178 commit
Timeline
- First public exploit (Metasploit exploit/linux/local/juju_run_agent_priv_esc)
- Published
Exploit prediction
48.50% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit exploit/linux/local/juju_run_agent_priv_esc Juju-run Agent Privilege Escalation metasploit exploit, excellent rank, 2017-04-13
- EDB-44023 Juju-run Agent - Privilege Escalation (Metasploit) local, 2018-02-12
- bugs.launchpad.net https://bugs.launchpad.net/juju/+bug/1682411 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| GitHub | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| go | github.com/juju/juju | <0.0.0-20170524231039-0417178a3c28 |
0.0.0-20170524231039-0417178a3c28 |
Classification
- Weakness
-
- CWE-862 Missing Authorization
References
-
github.com
/juju/juju/commit/0417178a3c2869537860e8b3b5e787ce1732231f
web, patch
-
exploit-db.com
/exploits/44023/
exploit
-
bugs.launchpad.net
/juju/+bug/1682411
web, exploit, issue-tracking, third-party-advisory
-
securityfocus.com
/bid/98737
vdb-entry, third-party-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2017-9232
advisory
-
github.com
/juju/juju
package
-
exploit-db.com
/exploits/44023
web
-
github.com
/advisories/GHSA-j3hp-pv6v-rgrx
advisory
Sources
- CVE List CVE-2017-9232
- GitHub Advisory GHSA-j3hp-pv6v-rgrx
- NVD CVE-2017-9232
- OSV GO-2025-3639
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.