CVE-2021-33632

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C. This issue...

CVE-2024-24892 Unauthorized RCE in migration-tools

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection', Improper Privilege Management vulnerability in openEuler migration-tools on Linux allows Command Injection, Restful Privilege Elevation. This vulnerability is associated with program files...

CVE-2024-24892 Unauthorized RCE in migration-tools

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection', Improper Privilege Management vulnerability in openEuler migration-tools on Linux allows Command Injection, Restful Privilege Elevation. This vulnerability is associated with program files...

CVE-2024-24892

CVE-2024-24892 describes an OS command injection and privilege escalation in openEuler migration-tools (versions 1.0.0–1.0.1). The root cause is improper neutralization of elements used in OS commands, allowing remote command execution via an exposed interface, which can lead to high-severity imp...

CVE-2024-24899 Command injection in aops-zeus

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in openEuler aops-zeus on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/aops-zeus/blob/master/zeus/conf/constant.Py. This issue...

CVE-2024-24899

CVE-2024-24899 affects openEuler aops-zeus versions 1.2.0–1.4.0, exposing OS command injection via the zeus/conf/constant.py (constant.Py) handling. The root cause is improper neutralization of special elements in commands, enabling a potential attacker to inject commands and impact confidentiali...

CVE-2024-24899 Command injection in aops-zeus

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in openEuler aops-zeus on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/aops-zeus/blob/master/zeus/conf/constant.Py. This issue...

CVE-2024-24897 Remote command execution in A-Tune-Collector

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in openEuler A-Tune-Collector on Linux allows Command Injection. This vulnerability is associated with program files...

CVE-2024-24897 Remote command execution in A-Tune-Collector

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in openEuler A-Tune-Collector on Linux allows Command Injection. This vulnerability is associated with program files...

CVE-2024-24897

CVE-2024-24897 affects openEuler A-Tune-Collector (1.1.0-3 through 1.3.0). The root cause is improper neutralization of shell commands in sched.py when obtaining a process ID, enabling command injection and remote arbitrary command execution. Multiple connected sources (Red Hat, NVD/NVD-like entr...

CVE-2024-24890 Command injection in ioprobe of gala-gopher

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in openEuler gala-gopher on Linux allows Command Injection. This vulnerability is associated with program files...

CVE-2024-24890 Command injection in ioprobe of gala-gopher

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in openEuler gala-gopher on Linux allows Command Injection. This vulnerability is associated with program files...

CVE-2024-24890

CVE-2024-24890 affects gala-gopher (openEuler) up to and including version 1.0.2, with an OS command injection in the ioprobe.c component of the eBPF-based probes framework. The vulnerability allows local command execution with low privileges and no user interaction, and has high impact on confid...

CVE-2021-33632

CVE-2021-33632 : TOCTOU race condition in openEuler iSulad on Linux. The issue affects iSulad versions 2.0.18-13 and 2.1.4-1 through 2.1.4-2, with the vulnerability linked to the main.C source file in the iSulad repo. The Red Hat and OpenEuler entries confirm the root cause as a TOCTOU race condi...

CVE-2021-33632 TOCTOU Race Condition problem in iSulad

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C. This issue...

CVE-2021-33632 TOCTOU Race Condition problem in iSulad

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C. This issue...

PT-2024-10972 · Openeuler · Openeuler Isulad

Name of the Vulnerable Software and Affected Versions: openEuler iSulad version 2.0.18-13 openEuler iSulad versions 2.1.4-1 through 2.1.4-2 Description: The issue is a Time-of-check Time-of-use TOCTOU Race Condition vulnerability in openEuler iSulad on Linux, allowing the leveraging of...

aops-zeus 安全漏洞

aops-zeus is a host and user manager service for openEuler, which is the foundation of aops. A security vulnerability exists in openEuler aops-zeus from version 1.2.0 through 1.4.0, which stems from the presence of an operating system command injection issue...

migration-tools 安全漏洞

migration-tools is openEuler's tool to help users migrate Centos systems to openEuler systems. A security vulnerability exists in openEuler migration-tools from version 1.0.0 to 1.0.1, which stems from an operating system command injection issue...

A-Tune 安全漏洞

A-Tune is a service for atuned AI tuning systems from the openEuler community. A security vulnerability exists in openEuler A-Tune-Collector from version 1.1.0-3 through 1.3.0 that stems from a command injection issue...