Skip to content
OpenAdvisories

Product · openEuler

iSulad

9 known vulnerabilities.

iSulad at a glance

Last 12 months
4
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 4 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202640
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

9 results · Feed

  • Medium 4.4

    Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is as…

  • High 7.4

    Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file …

  • Medium 5.6

    Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux. This vulnerability is associated…

  • High 8.6

    UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux. This vulnerability is associated wit…

  • High 7.0

    TOCTOU Race Condition problem in iSulad

    Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/…

  • High 8.4

    Run copy with container in a malicious directory may cause container escaping

    When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.

  • High 8.4

    Export container in a malicious directory may cause process to be hijacked

    When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.

  • High 8.4

    Load malicious images may cause process to be hijacked

    When the isula load command is used to load malicious images, attackers can execute arbitrary code.

  • Critical 9.8

    Pull malicious images may cause process to be hijacked

    When malicious images are pulled by isula pull, attackers can execute arbitrary code.