When the isula load command is used to load malicious images, attackers can execute arbitrary code.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HOpeneuler Isula
APPOpeneuler2.0.18-102.0.8-20210518.1445402.1.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
References
Related vulnerabilities
CVE-2021-33635CRITICAL9.8ten sam produkt
When malicious images are pulled by isula pull, attackers can execute arbitrary code.
CVE-2021-33637HIGH8.4ten sam produkt
When the isula export command is used to export a container to an image and the container is controlled by an...
CVE-2021-33638HIGH8.4ten sam produkt
When the isula cp command is used to copy files from a container to a host machine and the container is contr...
CVE-2021-33641HIGH7.8ten sam vendor
When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectl...
CVE-2021-33629HIGH7.5ten sam vendor
isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for proce...