openEuler is a Linux distribution and container platform developed for enterprise and cloud environments, with a focused vulnerability footprint centered on container runtime and build tooling such as Isula and Isula-build. The vendor's disclosed issues recur through weakness classes including improper initialization, code injection, and infinite-loop conditions that are characteristic of low-level container and compiler infrastructure. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by openEuler over time
Of all the CVEs published by openEuler as a CNA, 20.5% affect products that openEuler develops as a vendor.
Of all the CVEs published that affect products developed by openEuler, 100.0% are self-published by openEuler as a CNA.
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-33641HIGH When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free). | Jan 20, 2023 | 7.8 | 24 | NO | NO |
CVE-2021-33636HIGH
When the isula load command is used to load malicious images, attackers can execute arbitrary code.
| Oct 29, 2023 | 7.8 | 23 | NO | NO |
CVE-2021-33635HIGH When malicious images are pulled by isula pull, attackers can execute arbitrary code. | Oct 29, 2023 | 7.8 | 23 | NO | NO |
CVE-2021-33629HIGH isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when processing data. | Jul 26, 2021 | 7.5 | 22 | NO | NO |
CVE-2021-33638MEDIUM
When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.
| Oct 29, 2023 | 6.5 | 20 | NO | NO |
CVE-2021-33637MEDIUM
When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.
| Oct 29, 2023 | 6.5 | 20 | NO | NO |
CVE-2021-33642MEDIUM When a file is processed, an infinite loop occurs in next_inline() of the more_curly() function. | Jan 20, 2023 | 5.5 | 20 | NO | NO |
CVE-2021-33634MEDIUM iSulad uses the lcr+lxc runtime (default) to run malicious images, which can cause DOS.
| Oct 29, 2023 | 5.5 | 18 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by openEuler.
Media articles that mention a CVE ID that affects a product developed by openEuler — matched by CVE ID, not by vendor name.