Panwenjie2@Huawei.Com

**Name of the Vulnerable Software and Affected Versions** iSulad (affected versions not specified) **Description** The issue is related to iSulad using the lcr+lxc runtime by default to run malicious images, which can cause a Denial of Service (DOS). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** isula (affected versions not specified) **Description** The issue allows attackers to execute arbitrary code when malicious images are pulled by isula pull. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** isula (affected versions not specified) **Description** When the isula load command is used to load malicious images, attackers can execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** isula (affected versions not specified) **Description** The issue occurs when the isula export command is used to export a container to an image and the container is controlled by an attacker, allowing the attacker to escape the container. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** isula (affected versions not specified) **Description** The issue arises when the `isula cp` command is used to copy files from a container to a host machine, and the container is controlled by an attacker. This allows the attacker to escape the container. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.