« Volver al listado

CVE-2021-33638

Estado: ModificadaMedia (6.5)—

When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Openeuler — Isula

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-33638",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2021-33638",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-09T14:09:31.917709Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "securities@openeuler.org",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.4,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.5
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4,
        "exploitabilityScore": 2
      }
    ]
  },
  "affected": [
    {
      "source": "securities@openeuler.org",
      "affectedData": [
        {
          "repo": "https://gitee.com/src-openeuler/iSulad",
          "vendor": "openEuler",
          "modules": [
            "image"
          ],
          "product": "iSulad",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "0102-fix-loading-of-nsswitch-based-config-inside-chr.patch",
                  "status": "unaffected"
                },
                {
                  "at": "0106-fix-loading-of-nsswitch-based-config-inside-chroot-u.patch",
                  "status": "unaffected"
                }
              ],
              "version": "0",
              "versionType": "patch",
              "lessThanOrEqual": "2.0.8-20210518.144540.git5288ed93,2.0.18-10,2.1.2"
            }
          ],
          "platforms": [
            "Linux"
          ],
          "packageName": "iSulad",
          "programFiles": [
            "https://gitee.com/openeuler/iSulad/blob/master/src/utils/tar/util_archive.c"
          ],
          "collectionURL": "https://gitee.com/src-openeuler",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-10-29T08:15:20.823",
  "references": [
    {
      "url": "https://gitee.com/src-openeuler/iSulad/pulls/600/files",
      "tags": [
        "Patch"
      ],
      "source": "securities@openeuler.org"
    },
    {
      "url": "https://gitee.com/src-openeuler/iSulad/pulls/627/files",
      "tags": [
        "Patch"
      ],
      "source": "securities@openeuler.org"
    },
    {
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "securities@openeuler.org"
    },
    {
      "url": "https://gitee.com/src-openeuler/iSulad/pulls/600/files",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://gitee.com/src-openeuler/iSulad/pulls/627/files",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "securities@openeuler.org",
      "description": [
        {
          "lang": "en",
          "value": "CWE-665"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "\nWhen the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.\n\n"
    },
    {
      "lang": "es",
      "value": "Cuando el comando isula cp se usa para copiar archivos de un contenedor a una máquina host y el contenedor está controlado por un atacante, el atacante puede escapar del contenedor."
    }
  ],
  "lastModified": "2026-06-17T03:54:54.930",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:openeuler:isula:2.0.8-20210518.144540:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51FA2EC1-A161-4862-A120-CD48ABF49BBF"
            },
            {
              "criteria": "cpe:2.3:a:openeuler:isula:2.0.18-10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8848DE4D-ADA9-4E92-9FB9-DB53D3733173"
            },
            {
              "criteria": "cpe:2.3:a:openeuler:isula:2.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3205F81-7008-467C-A79A-BBD521231D48"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "securities@openeuler.org"
}