Description
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C. This issue affects iSulad: 2.0.18-13, from 2.1.4-1 through 2.1.4-2.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
openEuler iSulad
Default version status: unaffected
2.0.18-13affected2.1.4-1 to ≤ 2.1.4-2affected
References
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1307 ↗
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1287 ↗
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1290 ↗
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1289 ↗
- https://gitee.com/src-openeuler/iSulad/pulls/645 ↗
- https://gitee.com/src-openeuler/iSulad/pulls/640 ↗
- https://gitee.com/src-openeuler/iSulad/pulls/639 ↗