CVE-2021-30465
HIGH 8.5EPSS 10.2%
runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
- CVSS v3.1 NVD
- 8.5 HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS v3.1 GitHub
- 7.6 HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N - CVSS v2.0 NVD
- 6.0 MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:P - EPSS
- 10.24% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2021-05-27
- Updated
- 2024-08-03
Proof-of-concept exploits (1)
- raesene/vuln_pocs5★ · 2026-09-24
Security advisories
- http://www.openwall.com/lists/oss-security/2021/05/19/2
- opencontainers/runc/releases
- opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r
- https://security.gentoo.org/glsa/202107-26
- https://security.netapp.com/advisory/ntap-20210708-0003
- advisories/GHSA-c3xm-pvg7-gh7r
- https://bugzilla.opensuse.org/show_bug.cgi?id=1185405