openEuler

Latest CVEs · RSS

• CVE-2025-31344 2025-04-14 · CVSS 7.3
  Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib
• CVE-2024-24898 2024-04-15 · CVSS 6.0
  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is assoc
• CVE-2024-24891 2024-04-15 · CVSS 6.0
  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is assoc
• CVE-2024-24892 2024-03-25 · CVSS 8.1
  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper Privilege Management vulnerability in openEuler migration-t
• CVE-2024-24899 2024-03-25 · CVSS 7.2
  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-zeus on Linux allows Command Injectio
• CVE-2024-24897 2024-03-25 · CVSS 8.1
  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in openEuler A-Tune-Collector on Linux allows Command Injectio
• CVE-2024-24890 2024-03-25 · CVSS 7.8
  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler gala-gopher on Linux allows Command Inject
• CVE-2021-33632 2024-03-25 · CVSS 7.0
  Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Condi
• CVE-2021-33633 2024-03-23 · CVSS 7.3
  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-ceres on Linux allows Command Injecti
• CVE-2021-33631 2024-01-18 · CVSS 5.5
  Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kerne
• CVE-2021-33630 2024-01-18 · CVSS 5.5
  NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program
• CVE-2021-33638 2023-10-29 · CVSS 8.4
  When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the
• CVE-2021-33637 2023-10-29 · CVSS 8.4
  When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.
• CVE-2021-33636 2023-10-29 · CVSS 8.4
  When the isula load command is used to load malicious images, attackers can execute arbitrary code.
• CVE-2021-33635 2023-10-29 · CVSS 9.8
  When malicious images are pulled by isula pull, attackers can execute arbitrary code.
• CVE-2021-33634 2023-10-29 · CVSS 6.3
  iSulad uses the lcr+lxc runtime (default) to run malicious images, which can cause DOS.
• CVE-2021-33639 2023-03-08
  REMAP cmd of SVM driver can be used to remap read only memory as read-write, then cause read only memory/file modified.
• CVE-2021-33642 2023-01-20
  When a file is processed, an infinite loop occurs in next_inline() of the more_curly() function.
• CVE-2021-33641 2023-01-20
  When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).
• CVE-2021-33640 2022-12-19 · CVSS 6.2
  After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free
• CVE-2021-33643 2022-08-09
  An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causin
• CVE-2021-33644 2022-08-09
  An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causin
• CVE-2021-33645 2022-08-09
  The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.
• CVE-2021-33646 2022-08-09
  The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.
• CVE-2021-33655 2022-07-18
  When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.