47 matches found
CVE-2021-33637 Export container in a malicious directory may cause process to be hijacked
When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...
CVE-2021-33637 Export container in a malicious directory may cause process to be hijacked
When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...
CVE-2021-33637
CVE-2021-33637 describes a vulnerability in iSulad where, when the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container. The Red Hat CVD entry mirrors this description. Several open‑source advisories (...
CVE-2021-33636 Load malicious images may cause process to be hijacked
When the isula load command is used to load malicious images, attackers can execute arbitrary code...
CVE-2021-33636
CVE-2021-33636 is discussed in connected documents as affecting iSulad used in EulerOS and related advisories. The vulnerability occurs when the isula load command is used to load malicious images, allowing attackers to execute arbitrary code on the host. According to the CVSS in the initial docu...
CVE-2021-33635
CVE-2021-33635 affects iSulad within EulerOS (and isola-related tooling). The connected Red Hat/EUVD/OpenVAS entries confirm the vulnerability allows arbitrary code execution when malicious images are pulled with isula pull. The root cause is action by pulling/handling images via iSulad’s isula c...
CVE-2021-33635 Pull malicious images may cause process to be hijacked
When malicious images are pulled by isula pull, attackers can execute arbitrary code...
PT-2023-12215 · Isula · Isula
Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: The issue allows attackers to execute arbitrary code when malicious images are pulled by isula pull. Recommendations: At the moment, there is no information about a newer version that contain...
PT-2023-12218 · Isula · Isula
Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: The issue arises when the isula cp command is used to copy files from a container to a host machine, and the container is controlled by an attacker. This allows the attacker to escape the...
openEuler Security Vulnerability
openEuler is an operating system from the Open Atomics Open Source Foundation. A security vulnerability exists in openEuler that stems from an attacker being able to escape a container when the isula export command exports the container to an image and the container is under the control of an...
openEuler Security Vulnerability
openEuler is an operating system from the Open Atomics Open Source Foundation. A security vulnerability exists in openEuler that originates from an attacker being able to execute arbitrary code when a malicious image is loaded by the isula load command...
openEuler Security Vulnerability
openEuler is an operating system from the Open Atomics Open Source Foundation. A security vulnerability exists in openEuler that stems from an attacker being able to execute arbitrary code when a malicious image is pulled by the isula pull command...
PT-2023-12216 · Isula · Isula
Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: When the isula load command is used to load malicious images, attackers can execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains...
PT-2023-12217 · Isula · Isula
Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: The issue occurs when the isula export command is used to export a container to an image and the container is controlled by an attacker, allowing the attacker to escape the container...
openEuler Security Vulnerability
openEuler is an operating system from the Open Atomics Open Source Foundation. A security vulnerability exists in openEuler that stems from an attacker being able to escape from a container when the isula cp command copies files from the container to the host and the container is under the contro...
OESA-2023-1686 iSulad security update
Security Fixes: When malicious images are pulled by isula pull, attackers can execute arbitrary code.CVE-2021-33635 When the isula load command is used to load malicious images, attackers can execute arbitrary code.CVE-2021-33636 When the isula export command is used to export a container to an...
CVE-2021-33629
isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when processing data...
CVE-2021-33629
isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when processing data...
