TI-2021-13009 CVE-2021-33635 · GHSA-r64q-rcp8-3m38
Pull malicious images may cause process to be hijacked
Priority MEDIUM 44
When malicious images are pulled by isula pull, attackers can execute arbitrary code.
openEuler
Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9
Exploited now
openEuler records in CISA KEVNo openEuler vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Isula · all components
TI-2021-13012 CVE-2021-33638 · GHSA-6qw3-w6wv-8fgg
Run copy with container in a malicious directory may cause container escaping
Priority LOW 36
When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.
TI-2021-13011 CVE-2021-33637 · GHSA-2jw2-fcpf-pj3x
Export container in a malicious directory may cause process to be hijacked
Priority LOW 36
When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.
TI-2021-13010 CVE-2021-33636 · GHSA-q8rm-wvjp-6qf3
Load malicious images may cause process to be hijacked
Priority LOW 36
When the isula load command is used to load malicious images, attackers can execute arbitrary code.