Openeuler vulnerabilities
21 vulnerabilities
Known vulnerabilities in Openeuler products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 17 products.
Products
17- Isulad5 vulnerabilities
- Isula4 vulnerabilities
- Kernel4 vulnerabilities
- Byacc2 vulnerabilities
- A Tune Collector1 vulnerabilities
- Aops Ceres1 vulnerabilities
- Aops Zeus1 vulnerabilities
- Atune1 vulnerabilities
- Gala Gopher1 vulnerabilities
- Giflib1 vulnerabilities
- Icr1 vulnerabilities
- Isula Build1 vulnerabilities
- Lcr1 vulnerabilities
- Migration Tools1 vulnerabilities
- Openeuler 20.03 LTS SP11 vulnerabilities
- Openeuler 20.03 LTS SP31 vulnerabilities
- Openeuler 22.03 LTS1 vulnerabilities
RoutineCVE-2025-31344openeuler · giflib +22 moreThe giflib open-source component has a buffer overflow vulnerabilityHeap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.
This issue affects giflib: through 5.2.2.CVSS7.3HighEPSS0.26%RoutineCVE-2024-24898openeuler · kernel +24 moreInformation Leakage in kernelExposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is associated with program files https://gitee.Com/openeuler/kernel/blob/openEuler-1.0-LTS/drivers/staging/gmjstcm/tcm.C.
This issue affects kernel: from 4.19.90-2109.1.0.0108 before 4.19.90-2403.4.0.0244.CVSS6.0MediumEPSS0.22%RoutineCVE-2024-24891openeuler · kernel +24 moreInformation Leakage in kernelExposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is associated with program files https://gitee.Com/openeuler/kernel/blob/openEuler-1.0-LTS/drivers/staging/gmjstcm/tcm.C.
This issue affects kernel: from 4.19.90-2109.1.0.0108 before 4.19.90-2403.4.0.0244.CVSS6.0MediumEPSS0.22%RoutineCVE-2024-24892openeuler · migration-toolsUnauthorized RCE in migration-toolsImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper Privilege Management vulnerability in openEuler migration-tools on Linux allows Command Injection, Restful Privilege Elevation. This vulnerability is associated with program files https://gitee.Com/openeuler/migration-tools/blob/master/index.Py.
This issue affects migration-tools: from 1.0.0 through 1.0.1.CVSS8.1HighEPSS0.92%RoutineCVE-2024-24899openeuler · aops-zeusCommand injection in aops-zeusImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-zeus on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/aops-zeus/blob/master/zeus/conf/constant.Py.
This issue affects aops-zeus: from 1.2.0 through 1.4.0.CVSS7.2HighEPSS1.69%PrioritiseCVE-2024-24897openeuler · a-tune-collectorRemote command execution in A-Tune-CollectorImproper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in openEuler A-Tune-Collector on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/A-Tune-Collector/blob/master/atune_collector/plugin/monitor/process/sched.Py.
This issue affects A-Tune-Collector: from 1.1.0-3 through 1.3.0.CVSS8.1HighEPSS1.40%RoutineCVE-2024-24890openeuler · gala-gopherCommand injection in ioprobe of gala-gopherImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler gala-gopher on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/gala-gopher/blob/master/src/probes/extends/ebpf.Probe/src/ioprobe/ioprobe.C.
This issue affects gala-gopher: through 1.0.2.CVSS7.8HighEPSS1.05%RoutineCVE-2021-33632openeuler · isuladTOCTOU Race Condition problem in iSuladTime-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C.
This issue affects iSulad: 2.0.18-13, from 2.1.4-1 through 2.1.4-2.CVSS7.0HighEPSS0.15%RoutineCVE-2021-33633openeuler · aops-ceresCommand Injection in aops-ceresImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-ceres on Linux allows Command Injection. This vulnerability is associated with program files ceres/function/util.Py.
This issue affects aops-ceres: from 1.3.0 through 1.4.1.CVSS7.3HighEPSS0.78%RoutineCVE-2021-33631openeuler · kernel +105 moreKernel crash in EXT4 filesystemInteger Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0.CVSS7.8HighEPSS0.37%RoutineCVE-2021-33630openeuler · kernel +66 moreNULL-ptr-deref in network schedNULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program files net/sched/sch_cbs.C.
This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3.CVSS5.5MediumEPSS0.34%RoutineCVE-2021-33638openeuler · isulad +1 moreRun copy with container in a malicious directory may cause container escapingWhen the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.CVSS8.4HighEPSS0.21%RoutineCVE-2021-33637openeuler · isulad +1 moreExport container in a malicious directory may cause process to be hijackedWhen the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.CVSS8.4HighEPSS0.21%RoutineCVE-2021-33636openeuler · isulad +1 moreLoad malicious images may cause process to be hijackedWhen the isula load command is used to load malicious images, attackers can execute arbitrary code.CVSS8.4HighEPSS0.25%PrioritiseCVE-2021-33635openeuler · isulad +1 morePull malicious images may cause process to be hijackedWhen malicious images are pulled by isula pull, attackers can execute arbitrary code.CVSS9.8CriticalEPSS0.56%RoutineCVE-2021-33634openeuler · lcr +1 moreMalicious image running containers may cause DoS attacksiSulad uses the lcr+lxc runtime (default) to run malicious images, which can cause DOS.CVSS6.3MediumEPSS0.21%RoutineCVE-2021-33642openeuler · byaccopeneuler byaccWhen a file is processed, an infinite loop occurs in next_inline() of the more_curly() function.CVSS5.5MediumEPSS0.23%RoutineCVE-2021-33641openeuler · byaccopeneuler byaccWhen processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).CVSS7.8HighEPSS0.28%RoutineCVE-2021-33640openeuler · openeuler 20.03 lts sp1 +5 moreopeneuler openeuler 20.03 lts sp1After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the released memory is used (use-after-free).CVSS9.8CriticalEPSS0.69%RoutineCVE-2021-33658openeuler · atune +1 moreopeneuler atuneatune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file. Authentication is not forcibly enabled in the default configuration.CVSS7.8HighEPSS0.16%