Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C.

This issue affects iSulad: 2.0.18-13, from 2.1.4-1 through 2.1.4-2.

When the isula load command is used to load malicious images, attackers can execute arbitrary code.

When malicious images are pulled by isula pull, attackers can execute arbitrary code.

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.

When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.