title: TOCTOU Race Condition problem in iSulad
description: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C.
This issue affects iSulad: 2.0.18-13, from 2.1.4-1 through 2.1.4-2.
problem types: CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
affected:
{
collectionURL: https://gitee.com/openeuler
defaultStatus: unaffected
packageName: iSulad
platforms: Linux
product: iSulad
programFiles: https://gitee.com/openeuler/iSulad/blob/master/src/cmd/isulad/main.c
repo: https://gitee.com/openeuler/iSulad
vendor: openEuler
versions:
status: affected, version: 2.0.18-13
changes: [at: 7cb6c860e9b56def7667096351cabf793dc5645a upgrade from upstream, status: unaffected], lessThanOrEqual: 2.1.4-2, status: affected, version: 2.1.4-1, versionType: git
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL