Openeuler
18 CVEs across 17 Openeuler products. Browse Openeuler vulnerabilities, severities, and proof-of-concept exploits.
Openeuler products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-31344 | High | 7.3 | 2025-04-14 | Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects gifli… |
CVE-2024-24898 | Medium | 6.0 | 2024-04-15 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is asso… |
CVE-2024-24891 | Medium | 6.0 | 2024-04-15 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is asso… |
CVE-2024-24899 | High | 7.2 | 2024-03-25 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-zeus on Linux allows Command Injecti… |
CVE-2024-24897 | High | 8.1 | 2024-03-25 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in openEuler A-Tune-Collector on Linux allows Command Injecti… |
CVE-2024-24892 | High | 8.1 | 2024-03-25 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper Privilege Management vulnerability in openEuler migration-… |
CVE-2024-24890 | High | 7.8 | 2024-03-25 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler gala-gopher on Linux allows Command Injec… |
CVE-2021-33632 | High | 7.0 | 2024-03-25 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Cond… |
CVE-2021-33633 | High | 7.3 | 2024-03-23 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-ceres on Linux allows Command Inject… |
CVE-2021-33631 | Medium | 5.5 | 2024-01-18 | Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kern… |
CVE-2021-33630 | Medium | 5.5 | 2024-01-18 | NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with progra… |
CVE-2021-33638 | High | 8.4 | 2023-10-29 | When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the… |
CVE-2021-33637 | High | 8.4 | 2023-10-29 | When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container… |
CVE-2021-33636 | High | 8.4 | 2023-10-29 | When the isula load command is used to load malicious images, attackers can execute arbitrary code. |
CVE-2021-33635 | Critical | 9.8 | 2023-10-29 | When malicious images are pulled by isula pull, attackers can execute arbitrary code. |
CVE-2021-33634 | Medium | 6.3 | 2023-10-29 | iSulad uses the lcr+lxc runtime (default) to run malicious images, which can cause DOS. |
CVE-2021-33642 | Medium | 5.5 | 2023-01-20 | When a file is processed, an infinite loop occurs in next_inline() of the more_curly() function. |
CVE-2021-33641 | High | 7.8 | 2023-01-20 | When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free). |
CVE-2021-33640 | Medium | 6.2 | 2022-12-19 | After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: fre… |
CVE-2021-33658 | High | 7.8 | 2022-03-11 | atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file… |
CVE-2021-33629 | High | 7.5 | 2021-07-26 | isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when pro… |