CVE-2021-33637

2023-10-2908:15:20

CWE-665

[email protected]

web.nvd.nist.gov

isula export

container escape

security vulnerability

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

AI Score

9.2

Confidence

High

EPSS

Percentile

15.5%

JSON

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.

Affected configurations

Nvd

Node

openeulerisulaMatch2.0.8-20210518.144540

openeulerisulaMatch2.0.18-10

openeulerisulaMatch2.1.2

VendorProductVersionCPE
openeulerisula2.0.8-20210518.144540cpe:2.3:a:openeuler:isula:2.0.8-20210518.144540:*:*:*:*:*:*:*
openeulerisula2.0.18-10cpe:2.3:a:openeuler:isula:2.0.18-10:*:*:*:*:*:*:*
openeulerisula2.1.2cpe:2.3:a:openeuler:isula:2.1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openeuler	isula	2.0.8-20210518.144540	cpe:2.3:a:openeuler:isula:2.0.8-20210518.144540:::::::*
openeuler	isula	2.0.18-10	cpe:2.3:a:openeuler:isula:2.0.18-10:::::::*
openeuler	isula	2.1.2	cpe:2.3:a:openeuler:isula:2.1.2:::::::*