Description (CNA)
When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| openEuler / iSulad | affected 0 through 2.0.8-20210518.144540.git5288ed93,2.0.18-10,2.1.2 |
CWE
CWE-665
References
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686
- https://gitee.com/src-openeuler/iSulad/pulls/627/files
- https://gitee.com/src-openeuler/iSulad/pulls/600/files
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.