Skip to content
OpenAdvisories
High · 8.4 CVE-2021-33637 EUVD-2021-20314GHSA-2jw2-fcpf-pj3x

Export container in a malicious directory may cause process to be hijacked

Published Oct 29, 2023 · Updated Sep 9, 2024 · Assigned by openEuler

Description

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.

Affected products

VendorProductAffectedFixed
openEuler iSulad ≤ 2.0.8-20210518.144540.git5288ed93,2.0.18-10,2.1.2 —

References