securities@openeuler.org
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS securities@openeuler.org
03
assessed vulnerabilities (17)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-31344US | — | — | ||
Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.
This issue affects giflib: through 5.2.2. | ||||
| CVE-2024-24898US | — | — | ||
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is associated with program f… | ||||
| CVE-2024-24891US | — | — | ||
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is associated with program f… | ||||
| CVE-2024-24899US | — | — | ||
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-zeus on Linux allows Command Injection. This vulnerabilit… | ||||
| CVE-2024-24897US | — | — | ||
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in openEuler A-Tune-Collector on Linux allows Command Injection. This vulnerabilit… | ||||
| CVE-2024-24892US | — | — | ||
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper Privilege Management vulnerability in openEuler migration-tools on Linux allows… | ||||
| CVE-2024-24890US | — | — | ||
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler gala-gopher on Linux allows Command Injection. This vulnerabil… | ||||
| CVE-2021-33632US | — | — | ||
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerab… | ||||
| CVE-2021-33633US | — | — | ||
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-ceres on Linux allows Command Injection. This vulnerabili… | ||||
| CVE-2021-33631US | high7.8 | — | ||
Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 befo… | ||||
| CVE-2021-33630US | medium5.5 | — | ||
NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program files net/sched/sch… | ||||
| CVE-2021-33638US | medium6.5 | — | ||
When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.
| ||||
| CVE-2021-33637US | medium6.5 | — | ||
When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.
| ||||
| CVE-2021-33636US | high7.8 | — | ||
When the isula load command is used to load malicious images, attackers can execute arbitrary code.
| ||||
| CVE-2021-33635US | high7.8 | — | ||
When malicious images are pulled by isula pull, attackers can execute arbitrary code. | ||||
| CVE-2021-33634US | medium5.5 | — | ||
iSulad uses the lcr+lxc runtime (default) to run malicious images, which can cause DOS.
| ||||
| CVE-2021-33640US | critical9.8 | — | ||
After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t… | ||||