« Volver al listado

CVE-2021-33637

Estado: ModificadaMedia (6.5)—

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Openeuler — Isula

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-33637",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2021-33637",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-09T14:10:22.389662Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "securities@openeuler.org",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.4,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.5
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4,
        "exploitabilityScore": 2
      }
    ]
  },
  "affected": [
    {
      "source": "securities@openeuler.org",
      "affectedData": [
        {
          "repo": "https://gitee.com/src-openeuler/iSulad",
          "vendor": "openEuler",
          "modules": [
            "image"
          ],
          "product": "iSulad",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "0102-fix-loading-of-nsswitch-based-config-inside-chr.patch",
                  "status": "unaffected"
                },
                {
                  "at": "0106-fix-loading-of-nsswitch-based-config-inside-chroot-u.patch",
                  "status": "unaffected"
                }
              ],
              "version": "0",
              "versionType": "patch",
              "lessThanOrEqual": "2.0.8-20210518.144540.git5288ed93,2.0.18-10,2.1.2"
            }
          ],
          "platforms": [
            "Linux"
          ],
          "packageName": "iSulad",
          "programFiles": [
            "https://gitee.com/openeuler/iSulad/blob/master/src/utils/tar/util_archive.c"
          ],
          "collectionURL": "https://gitee.com/src-openeuler",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-10-29T08:15:20.763",
  "references": [
    {
      "url": "https://gitee.com/src-openeuler/iSulad/pulls/600/files",
      "tags": [
        "Patch"
      ],
      "source": "securities@openeuler.org"
    },
    {
      "url": "https://gitee.com/src-openeuler/iSulad/pulls/627/files",
      "tags": [
        "Patch"
      ],
      "source": "securities@openeuler.org"
    },
    {
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "securities@openeuler.org"
    },
    {
      "url": "https://gitee.com/src-openeuler/iSulad/pulls/600/files",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://gitee.com/src-openeuler/iSulad/pulls/627/files",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "securities@openeuler.org",
      "description": [
        {
          "lang": "en",
          "value": "CWE-665"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "\nWhen the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.\n\n"
    },
    {
      "lang": "es",
      "value": "Cuando el comando isula export se utiliza para exportar un contenedor a una imagen y el contenedor está controlado por un atacante, el atacante puede escapar del contenedor."
    }
  ],
  "lastModified": "2026-06-17T03:54:54.810",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:openeuler:isula:2.0.8-20210518.144540:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51FA2EC1-A161-4862-A120-CD48ABF49BBF"
            },
            {
              "criteria": "cpe:2.3:a:openeuler:isula:2.0.18-10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8848DE4D-ADA9-4E92-9FB9-DB53D3733173"
            },
            {
              "criteria": "cpe:2.3:a:openeuler:isula:2.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3205F81-7008-467C-A79A-BBD521231D48"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "securities@openeuler.org"
}