Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2806▲ 5 respecto a la semana anterior

Críticas / altas1465▲ 246 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)77▼ 441 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-33632	Aplazada	Alta (7)	0.15%	—	Openeuler Isulad^AI	25/3/2024	17/6/2026	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C. This issue affects iSulad:…
CVE-2021-33638	Modificada	Media (6.5)	0.21%	—	Openeuler Isula	29/10/2023	17/6/2026	When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.
CVE-2021-33637	Modificada	Media (6.5)	0.21%	—	Openeuler Isula	29/10/2023	17/6/2026	When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.
CVE-2021-33636	Modificada	Alta (7.8)	0.25%	—	Openeuler Isula	29/10/2023	17/6/2026	When the isula load command is used to load malicious images, attackers can execute arbitrary code.
CVE-2021-33635	Modificada	Alta (7.8)	0.55%	—	Openeuler Isula	29/10/2023	17/6/2026	When malicious images are pulled by isula pull, attackers can execute arbitrary code.
CVE-2021-33629	Modificada	Alta (7.5)	0.96%	—	Openeuler Isula-build	26/7/2021	17/6/2026	isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when processing data.