openEuler

12 results · Clear filters · Feed

• High 7.4
  CVE-2026-111435

  Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file …

  openEuler iSulad
  Nov 12, 2026
• High 8.6
  CVE-2026-111433

  UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux. This vulnerability is associated wit…

  openEuler iSulad
  Nov 12, 2026
• High 7.3
  CVE-2025-31344

  The giflib open-source component has a buffer overflow vulnerability

  Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.

  openEuler giflib giflib giflib Debian Azure Linux Alpine
  Apr 14, 2025
• High 8.1
  CVE-2024-24892

  Unauthorized RCE in migration-tools

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper Privilege Management vulnerability in openEuler migration-tools on Linux allows Command Injection, Restful Privilege Elevation. This vulnerability is associat…

  openEuler migration-tools
  Mar 25, 2024
• High 7.2
  CVE-2024-24899

  Command injection in aops-zeus

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-zeus on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/aops-zeus/blob/m…

  openEuler aops-zeus
  Mar 25, 2024
• High 8.1
  CVE-2024-24897

  Remote command execution in A-Tune-Collector

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in openEuler A-Tune-Collector on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/A-Tune-Collector…

  openEuler A-Tune-Collector
  Mar 25, 2024
• High 7.8
  CVE-2024-24890

  Command injection in ioprobe of gala-gopher

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler gala-gopher on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/gala-gopher/bl…

  openEuler gala-gopher
  Mar 25, 2024
• High 7.0
  CVE-2021-33632

  TOCTOU Race Condition problem in iSulad

  Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/…

  openEuler iSulad
  Mar 25, 2024
• High 7.3
  CVE-2021-33633

  Command Injection in aops-ceres

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-ceres on Linux allows Command Injection. This vulnerability is associated with program files ceres/function/util.Py. This issue affects …

  openEuler aops-ceres
  Mar 23, 2024
• High 8.4
  CVE-2021-33638

  Run copy with container in a malicious directory may cause container escaping

  When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.

  openEuler iSulad
  Oct 29, 2023
• High 8.4
  CVE-2021-33637

  Export container in a malicious directory may cause process to be hijacked

  When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.

  openEuler iSulad
  Oct 29, 2023
• High 8.4
  CVE-2021-33636

  Load malicious images may cause process to be hijacked

  When the isula load command is used to load malicious images, attackers can execute arbitrary code.

  openEuler iSulad
  Oct 29, 2023