PT-2023-12216 · Isula · Isula

[e-mail] · Publicado 2023-09-28 · Atualizado 2024-09-09 · CVE-2021-33636

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions isula (affected versions not specified)

Description When the isula load command is used to load malicious images, attackers can execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Initialization

Code Injection

Enumeração de Fraquezas

CWE-665

CWE-94

Identificadores relacionados

CVE-2021-33636

OESA-2023-1686

Produtos afetados

Isula

Referências · 14

• https://twitter.com/cracbot/status/1718966047418544474 · Publicação no Twitter
• https://t.me/cibsecurity/73112 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2021-33635 · Nota de Segurança
• https://osv.dev/vulnerability/OESA-2023-1686 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2021-33636 · Nota de Segurança
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1686 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-33637 · Nota de Segurança
• https://gitee.com/src-openeuler/iSulad/pulls/600/files · Correção
• https://t.me/cvenotify/93819 · Publicação no Telegram
• https://gitee.com/src-openeuler/iSulad/pulls/627/files · Correção
• https://t.me/cvenotify/60157 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2021-33638 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2021-33636 · Aviso do Fabricante
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686 · Aviso do Fabricante