Container Image Building Vulnerability in isula-build by OpenEuler
CVE-2021-33629

7.5HIGH

Key Information:

Vendor

Openeuler

Status
Isula-build
Vendor
CVE Published:
26 July 2021

What is CVE-2021-33629?

A vulnerability exists in isula-build prior to version 0.9.5-6 that can result in a program crash while building container images. This occurs because certain functions responsible for processing external data fail to adequately handle spaces, leading to instability during the image creation process. Proper sanitation of input data is essential to prevent such vulnerabilities.

References

https://openeuler.org/zh/security/safety-bulletin/detail....
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.