2 lines
2.1 KiB
JSON
2 lines
2.1 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://atomgit.com/src-openeuler/iSulad","defaultStatus":"affected","packageName":"iSulad","platforms":["Linux"],"product":"iSulad","programFiles":["src/daemon/modules/spec/specs_mount.c"],"repo":"https://atomgit.com/openeuler/iSulad","vendor":"openEuler","versions":[{"lessThanOrEqual":"2.1.6","status":"affected","version":"0","versionType":"rpm"}]}],"source":"securities@openeuler.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nIf an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read."}],"id":"CVE-2026-111433","lastModified":"2026-11-12T10:17:27.557","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"securities@openeuler.org","type":"Secondary"}]},"published":"2026-11-12T04:17:17.160","references":[{"source":"securities@openeuler.org","url":"https://atomgit.com/openeuler/iSulad/commit/3af9a2bf517b570fe20b1ee1070668a6270d6e11?ref=master&prId=2652"},{"source":"securities@openeuler.org","url":"https://atomgit.com/src-openeuler/iSulad/pull/812"},{"source":"securities@openeuler.org","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865"}],"sourceIdentifier":"securities@openeuler.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-61"}],"source":"securities@openeuler.org","type":"Secondary"}]}
|