Juju CVE-2017-8849 Local Privilege Escalation Vulnerability
BID:98737
Info
Juju CVE-2017-8849 Local Privilege Escalation Vulnerability
| Bugtraq ID: | 98737 |
| Class: | Configuration Error |
| CVE: |
CVE-2017-9232 |
| Remote: | No |
| Local: | Yes |
| Published: | May 27 2017 12:00AM |
| Updated: | May 27 2017 12:00AM |
| Credit: | Ryan Beisner |
| Vulnerable: |
Juju Juju 2.1 Juju Juju 2.0 |
| Not Vulnerable: |
Juju Juju 2.1.3 Juju Juju 2.0.4 Juju Juju 1.25.12 |
Discussion
Juju CVE-2017-8849 Local Privilege Escalation Vulnerability
Juju is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this issue to gain elevated root privileges.
The following versions are affected:
Versions prior to Juju 1.25.12
Juju versions 2.0.x prior to 2.0.4 and
Juju versions 2.1.x prior to 2.1.3
Juju is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this issue to gain elevated root privileges.
The following versions are affected:
Versions prior to Juju 1.25.12
Juju versions 2.0.x prior to 2.0.4 and
Juju versions 2.1.x prior to 2.1.3
Exploit / POC
Juju CVE-2017-8849 Local Privilege Escalation Vulnerability
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
Solution / Fix
Juju CVE-2017-8849 Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Juju CVE-2017-8849 Local Privilege Escalation Vulnerability
References:
References:
- Juju Homepage (Juju)
- juju-run unit root escalation vulnerability (Juju)