CVE-2021-30465
High
Description
runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
SeverityHigh
CVSS8.5
Exploit probability—
Product
Linuxfoundation Runc
PublishedMay 27, 2021
First seenMay 27, 2021
How to fix
Update
- github.com/opencontainers/runc1.0.0-rc95 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linuxfoundation runc | v ≤ 0.1.1, 1.0.0 | — |
| fedoraproject fedora | 33, 34 | — |
| github.com/opencontainers/runcGo | v < 1.0.0-rc95 | 1.0.0-rc95 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.