UpHeron
All vulnerabilities

Servers and applications

CVE-2021-30465

mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs

Severity
High 8.5
Published
19 May 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.0.0-rc95
Also known as
GHSA-c3xm-pvg7-gh7r
Sources
NVD, Project advisories (GitHub)

Description

runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.

Affected software

SoftwareAffected versions
runcServers and applications · cpe:a:linuxfoundation:runc
  • Version 1.0.0-rc94
  • Version 1.0.0-rc93
  • Version 1.0.0-rc92
  • Version 1.0.0-rc91
All 16 release lines
  • Every version up to 0.1.1
  • Version 1.0.0-rc1
  • Version 1.0.0-rc2
  • Version 1.0.0-rc3
  • Version 1.0.0-rc4
  • Version 1.0.0-rc5
  • Version 1.0.0-rc6
  • Version 1.0.0-rc7
  • Version 1.0.0-rc8
  • Version 1.0.0-rc9
  • Version 1.0.0-rc10
  • Version 1.0.0-rc90
  • Version 1.0.0-rc91
  • Version 1.0.0-rc92
  • Version 1.0.0-rc93
  • Version 1.0.0-rc94
runcServers and applications · github:opencontainers/runc
  • Every version before 1.0.0-rc95

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-30465
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-30465
  • GitHub Advisory Database https://github.com/advisories/GHSA-c3xm-pvg7-gh7r
  • github.com https://github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r