Skip to content
OpenAdvisories
High · 8.4 CVE-2021-33638 EUVD-2021-20315GHSA-6qw3-w6wv-8fgg

Run copy with container in a malicious directory may cause container escaping

Published Oct 29, 2023 · Updated Sep 9, 2024 · Assigned by openEuler

Description

When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.

Affected products

VendorProductAffectedFixed
openEuler iSulad ≤ 2.0.8-20210518.144540.git5288ed93,2.0.18-10,2.1.2 —

References