CVE-2021-33635

CRITICAL

OpenEuler isula - Code Injection via Malicious Images

Title source: llm
STIX 2.1

Description

When malicious images are pulled by isula pull, attackers can execute arbitrary code.

References (3)

Scores

CVSS v3 9.8
EPSS 0.0015
EPSS Percentile 35.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-665 CWE-94
Status published
Products (3)
openeuler/isula 2.0.8-20210518.144540
openeuler/isula 2.0.18-10
openeuler/isula 2.1.2
Published Oct 29, 2023
Tracked Since Feb 18, 2026