CVE-2021-33638

2023-10-2908:15:20

CWE-665

[email protected]

web.nvd.nist.gov

cve-2021-33638

isula cp command

container escape

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

AI Score

9.2

Confidence

High

EPSS

Percentile

15.5%

JSON

When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.

Affected configurations

Nvd

Node

openeulerisulaMatch2.0.8-20210518.144540

openeulerisulaMatch2.0.18-10

openeulerisulaMatch2.1.2

VendorProductVersionCPE
openeulerisula2.0.8-20210518.144540cpe:2.3:a:openeuler:isula:2.0.8-20210518.144540:*:*:*:*:*:*:*
openeulerisula2.0.18-10cpe:2.3:a:openeuler:isula:2.0.18-10:*:*:*:*:*:*:*
openeulerisula2.1.2cpe:2.3:a:openeuler:isula:2.1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openeuler	isula	2.0.8-20210518.144540	cpe:2.3:a:openeuler:isula:2.0.8-20210518.144540:::::::*
openeuler	isula	2.0.18-10	cpe:2.3:a:openeuler:isula:2.0.18-10:::::::*
openeuler	isula	2.1.2	cpe:2.3:a:openeuler:isula:2.1.2:::::::*