What’s Vulnerable › Vulnerabilities

CVE-2021-33635: Pull malicious images may cause process to be hijacked

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-29 · updated 2026-06-17
• Weakness: CWE-665

Description

When malicious images are pulled by isula pull, attackers can execute arbitrary code.

Affected products

• openEuler iSulad: 2.0.8-20210518.144540, 2.0.18-10, 2.1.2

References

• https://gitee.com/src-openeuler/iSulad/pulls/600/files
• https://gitee.com/src-openeuler/iSulad/pulls/627/files
• https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686
• https://gitee.com/src-openeuler/iSulad/pulls/600/files
• https://gitee.com/src-openeuler/iSulad/pulls/627/files
• https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686

Get alerted when CVE-2021-33635 or the next vulnerability affects your stack