Openeuler Isulad vulnerabilities
5 vulnerabilities
Known vulnerabilities in Openeuler Isulad, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2021-33632openeuler · isuladTOCTOU Race Condition problem in iSuladTime-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C.
This issue affects iSulad: 2.0.18-13, from 2.1.4-1 through 2.1.4-2.CVSS7.0HighEPSS0.15%RoutineCVE-2021-33638openeuler · isulad +1 moreRun copy with container in a malicious directory may cause container escapingWhen the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.CVSS8.4HighEPSS0.21%RoutineCVE-2021-33637openeuler · isulad +1 moreExport container in a malicious directory may cause process to be hijackedWhen the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.CVSS8.4HighEPSS0.21%RoutineCVE-2021-33636openeuler · isulad +1 moreLoad malicious images may cause process to be hijackedWhen the isula load command is used to load malicious images, attackers can execute arbitrary code.CVSS8.4HighEPSS0.25%PrioritiseCVE-2021-33635openeuler · isulad +1 morePull malicious images may cause process to be hijackedWhen malicious images are pulled by isula pull, attackers can execute arbitrary code.CVSS9.8CriticalEPSS0.56%