// For flags

CVE-2021-33632

TOCTOU Race Condition problem in iSulad

Severity Score

7.0
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Track*
*SSVC
Descriptions

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C. This issue affects iSulad: 2.0.18-13, from 2.1.4-1 through 2.1.4-2.

La vulnerabilidad de condición de ejecución de tiempo de verificación y tiempo de uso (TOCTOU) en openEuler iSulad en Linux permite aprovechar las condiciones de ejecución de tiempo de verificación y tiempo de uso (TOCTOU). Esta vulnerabilidad está asociada con archivos de programa https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C. Este problema afecta a iSulad: 2.0.18-13, desde 2.1.4-1 hasta 2.1.4-2.

*Credits: dbearzhu@huawei.com
CVSS Scores
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
High
Authentication
Single
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:Track*
Exploitation
None
Automatable
No
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2021-05-28 CVE Reserved
  • 2024-03-25 CVE Published
  • 2024-03-25 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
CAPEC
  • CAPEC-29: Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Openeuler
Search vendor "Openeuler"
 Isula
Search vendor "Openeuler" for product "Isula"
*-
Affected
Huawei
Search vendor "Huawei"
 Euleros
Search vendor "Huawei" for product "Euleros"
*-
Affected