Vulnerabilities

TI-2021-13012 CVE-2021-33638 · GHSA-6qw3-w6wv-8fgg

Run copy with container in a malicious directory may cause container escaping

LOW 36

When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00215 Published 2023-10-29 No fix listed CWE-665

TI-2021-13011 CVE-2021-33637 · GHSA-2jw2-fcpf-pj3x

Export container in a malicious directory may cause process to be hijacked

LOW 36

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00215 Published 2023-10-29 No fix listed CWE-665

TI-2021-13010 CVE-2021-33636 · GHSA-q8rm-wvjp-6qf3

Load malicious images may cause process to be hijacked

LOW 36

When the isula load command is used to load malicious images, attackers can execute arbitrary code.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00252 Published 2023-10-29 No fix listed CWE-665

TI-2021-13009 CVE-2021-33635 · GHSA-r64q-rcp8-3m38

Pull malicious images may cause process to be hijacked

MEDIUM 44

When malicious images are pulled by isula pull, attackers can execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00558 Published 2023-10-29 No fix listed CWE-665

Vulnerabilities

Filters

Run copy with container in a malicious directory may cause container escaping

Export container in a malicious directory may cause process to be hijacked

Load malicious images may cause process to be hijacked

Pull malicious images may cause process to be hijacked