Skip to content
OpenAdvisories

Product · openEuler

iSulad

9 known vulnerabilities.

6 results · Clear filters · Feed

  • High 7.4

    Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file …

  • High 8.6

    UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux. This vulnerability is associated wit…

  • High 7.0

    TOCTOU Race Condition problem in iSulad

    Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/…

  • High 8.4

    Run copy with container in a malicious directory may cause container escaping

    When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.

  • High 8.4

    Export container in a malicious directory may cause process to be hijacked

    When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.

  • High 8.4

    Load malicious images may cause process to be hijacked

    When the isula load command is used to load malicious images, attackers can execute arbitrary code.