CVE-2021-33636

2023-10-2908:15:20

CWE-94

CWE-665

[email protected]

web.nvd.nist.gov

vulnerability

isula load

arbitrary code execution

security

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.001

Percentile

28.5%

JSON

When the isula load command is used to load malicious images, attackers can execute arbitrary code.

Affected configurations

Nvd

Node

openeulerisulaMatch2.0.8-20210518.144540

openeulerisulaMatch2.0.18-10

openeulerisulaMatch2.1.2

VendorProductVersionCPE
openeulerisula2.0.8-20210518.144540cpe:2.3:a:openeuler:isula:2.0.8-20210518.144540:*:*:*:*:*:*:*
openeulerisula2.0.18-10cpe:2.3:a:openeuler:isula:2.0.18-10:*:*:*:*:*:*:*
openeulerisula2.1.2cpe:2.3:a:openeuler:isula:2.1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openeuler	isula	2.0.8-20210518.144540	cpe:2.3:a:openeuler:isula:2.0.8-20210518.144540:::::::*
openeuler	isula	2.0.18-10	cpe:2.3:a:openeuler:isula:2.0.18-10:::::::*
openeuler	isula	2.1.2	cpe:2.3:a:openeuler:isula:2.1.2:::::::*