{"id":"CVE-2017-9232","details":"Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.","aliases":["GHSA-j3hp-pv6v-rgrx","GO-2025-3639"],"modified":"2026-08-07T11:31:29.820452721Z","published":"2017-05-28T00:29:00.453Z","related":["openSUSE-SU-2025:15033-1"],"database_specific":{"unresolved_ranges":[{"source":"CPE_STRING","vendor_product":"canonical:juju","cpes":["cpe:2.3:a:canonical:juju:2.0.0:alpha1:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:alpha2:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta10:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta11:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta12:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta13:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta14:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta15:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta16:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta17:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta18:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta2:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta3:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta4:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta5:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta6:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta7:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta8:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:beta9:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:rc1:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:rc2:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:rc3:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.1.0:beta1:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.1.0:beta2:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.1.0:beta3:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.1.0:beta4:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.1.0:beta5:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.1.0:rc1:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.1.0:rc2:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.0.0-alpha1"},{"last_affected":"2.0.0-alpha1"},{"introduced":"2.0.0-alpha2"},{"last_affected":"2.0.0-alpha2"},{"introduced":"2.0.0-beta1"},{"last_affected":"2.0.0-beta1"},{"introduced":"2.0.0-beta10"},{"last_affected":"2.0.0-beta10"},{"introduced":"2.0.0-beta11"},{"last_affected":"2.0.0-beta11"},{"introduced":"2.0.0-beta12"},{"last_affected":"2.0.0-beta12"},{"introduced":"2.0.0-beta13"},{"last_affected":"2.0.0-beta13"},{"introduced":"2.0.0-beta14"},{"last_affected":"2.0.0-beta14"},{"introduced":"2.0.0-beta15"},{"last_affected":"2.0.0-beta15"},{"introduced":"2.0.0-beta16"},{"last_affected":"2.0.0-beta16"},{"introduced":"2.0.0-beta17"},{"last_affected":"2.0.0-beta17"},{"introduced":"2.0.0-beta18"},{"last_affected":"2.0.0-beta18"},{"introduced":"2.0.0-beta2"},{"last_affected":"2.0.0-beta2"},{"introduced":"2.0.0-beta3"},{"last_affected":"2.0.0-beta3"},{"introduced":"2.0.0-beta4"},{"last_affected":"2.0.0-beta4"},{"introduced":"2.0.0-beta5"},{"last_affected":"2.0.0-beta5"},{"introduced":"2.0.0-beta6"},{"last_affected":"2.0.0-beta6"},{"introduced":"2.0.0-beta7"},{"last_affected":"2.0.0-beta7"},{"introduced":"2.0.0-beta8"},{"last_affected":"2.0.0-beta8"},{"introduced":"2.0.0-beta9"},{"last_affected":"2.0.0-beta9"},{"introduced":"2.0.0-rc1"},{"last_affected":"2.0.0-rc1"},{"introduced":"2.0.0-rc2"},{"last_affected":"2.0.0-rc2"},{"introduced":"2.0.0-rc3"},{"last_affected":"2.0.0-rc3"},{"introduced":"2.1.0-beta1"},{"last_affected":"2.1.0-beta1"},{"introduced":"2.1.0-beta2"},{"last_affected":"2.1.0-beta2"},{"introduced":"2.1.0-beta3"},{"last_affected":"2.1.0-beta3"},{"introduced":"2.1.0-beta4"},{"last_affected":"2.1.0-beta4"},{"introduced":"2.1.0-beta5"},{"last_affected":"2.1.0-beta5"},{"introduced":"2.1.0-rc1"},{"last_affected":"2.1.0-rc1"},{"introduced":"2.1.0-rc2"},{"last_affected":"2.1.0-rc2"}]}]},"references":[{"type":"WEB","url":"https://www.exploit-db.com/exploits/44023/"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/98737"},{"type":"REPORT","url":"https://bugs.launchpad.net/juju/+bug/1682411"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/juju/juju","events":[{"introduced":"0"},{"last_affected":"143d53377f5e41ad1da0fd6f357a733d1b7cd18d"},{"introduced":"6cf1bc9d917a4c56d0034fd6e0d6f394d6eddb6e"},{"last_affected":"7f85784eaf0f9df9e5d95ff6766d81a9e0076472"}],"database_specific":{"cpe":["cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.1.0:*:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.1.1:*:*:*:*:*:*:*","cpe:2.3:a:canonical:juju:2.1.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"last_affected":"1.25.12"},{"introduced":"2.0.0"},{"last_affected":"2.0.0"},{"introduced":"2.0.1"},{"last_affected":"2.0.1"},{"introduced":"2.0.2"},{"last_affected":"2.0.2"},{"introduced":"2.0.3"},{"last_affected":"2.0.3"},{"introduced":"2.1.0"},{"last_affected":"2.1.0"},{"introduced":"2.1.1"},{"last_affected":"2.1.1"},{"introduced":"2.1.2"},{"last_affected":"2.1.2"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["2.0.0","2.0.1","2.0.2","2.0.3","2.1.0","2.1.1","2.1.2","juju-1.25.12","juju-1.25.11","juju-2.1.2","juju-2.1.1","juju-2.1.0","juju-2.1-rc2","juju-2.1-rc1","juju-2.1-beta5","juju-1.25.10","juju-1.25.9","juju-2.1-beta4","juju-2.1-beta3","juju-2.1-beta2","juju-1.25.8","juju-2.1-beta1","juju-1.25.7","juju-2.0.0","juju-1.25.6","juju-1.25.5","juju-1.25.4","juju-1.25.3","juju-1.25.2","juju-1.25-beta1","juju-1.25.1","juju-1.25.0","juju-1.25-alpha1","juju-1.21-alpha3","juju-1.21-alpha2","juju-1.21-alpha1","juju-1.19.4","juju-1.19.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9232.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}