CVE-2021-33638 Run copy with container in a malicious directory may cause container escaping

When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container...

CVE-2021-33637 Export container in a malicious directory may cause process to be hijacked

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...

CVE-2021-33637 Export container in a malicious directory may cause process to be hijacked

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...

CVE-2021-33637

CVE-2021-33637 describes a vulnerability in iSulad where, when the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container. The Red Hat CVD entry mirrors this description. Several open‑source advisories (...

CVE-2021-33636

CVE-2021-33636 is discussed in connected documents as affecting iSulad used in EulerOS and related advisories. The vulnerability occurs when the isula load command is used to load malicious images, allowing attackers to execute arbitrary code on the host. According to the CVSS in the initial docu...

CVE-2021-33636 Load malicious images may cause process to be hijacked

When the isula load command is used to load malicious images, attackers can execute arbitrary code...

CVE-2021-33635

CVE-2021-33635 affects iSulad within EulerOS (and isola-related tooling). The connected Red Hat/EUVD/OpenVAS entries confirm the vulnerability allows arbitrary code execution when malicious images are pulled with isula pull. The root cause is action by pulling/handling images via iSulad’s isula c...

CVE-2021-33635 Pull malicious images may cause process to be hijacked

When malicious images are pulled by isula pull, attackers can execute arbitrary code...

CVE-2021-33635: Improper Initialization

When malicious images are pulled by isula pull, attackers can execute arbitrary code...

PT-2023-12215 · Isula · Isula

Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: The issue allows attackers to execute arbitrary code when malicious images are pulled by isula pull. Recommendations: At the moment, there is no information about a newer version that contain...

PT-2023-12218 · Isula · Isula

Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: The issue arises when the isula cp command is used to copy files from a container to a host machine, and the container is controlled by an attacker. This allows the attacker to escape the...

openEuler Security Vulnerability

openEuler is an operating system from the Open Atomics Open Source Foundation. A security vulnerability exists in openEuler that stems from an attacker being able to escape a container when the isula export command exports the container to an image and the container is under the control of an...

CVE-2021-33638: Improper Initialization

When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container...

openEuler Security Vulnerability

openEuler is an operating system from the Open Atomics Open Source Foundation. A security vulnerability exists in openEuler that originates from an attacker being able to execute arbitrary code when a malicious image is loaded by the isula load command...

CVE-2021-33636: Improper Initialization

When the isula load command is used to load malicious images, attackers can execute arbitrary code...

CVE-2021-33637: Improper Initialization

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...

PT-2023-12216 · Isula · Isula

Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: When the isula load command is used to load malicious images, attackers can execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains...

PT-2023-12217 · Isula · Isula

Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: The issue occurs when the isula export command is used to export a container to an image and the container is controlled by an attacker, allowing the attacker to escape the container...

openEuler Security Vulnerability

openEuler is an operating system from the Open Atomics Open Source Foundation. A security vulnerability exists in openEuler that stems from an attacker being able to execute arbitrary code when a malicious image is pulled by the isula pull command...

openEuler Security Vulnerability

openEuler is an operating system from the Open Atomics Open Source Foundation. A security vulnerability exists in openEuler that stems from an attacker being able to escape from a container when the isula cp command copies files from the container to the host and the container is under the contro...