CVE-2021-30465

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 27-05-2021 03:15

Last modified: - 16-05-2022 11:03

Total changes: - 8

Description

runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

High

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Low

Privileges required

Changed

Scope

None

User interaction

8.5

Base score

1.8

6.0

Exploitability score

Impact score

Verification logic

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc7

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc6

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc5

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc4

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc3

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc2

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc1

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc8

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc9

vendor=linuxfoundation AND product=runc AND versionEndIncluding=0.1.1

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc10

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc90

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc91

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc92

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc93

vendor=linuxfoundation AND product=runc AND version=1.0.0 AND update=rc94

vendor=fedoraproject AND product=fedora AND version=33

vendor=fedoraproject AND product=fedora AND version=34

Reference

https://github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r
https://github.com/opencontainers/runc/releases
http://www.openwall.com/lists/oss-security/2021/05/19/2
FEDORA-2021-2eb67ba3c2-Mailing List, Third Party Advisory
FEDORA-2021-0440f235a0-Mailing List, Third Party Advisory
https://bugzilla.opensuse.org/show_bug.cgi?id=1185405
https://github.com/opencontainers/runc/commit/0ca91f44f1664da834bc61115a849b56d22f595f
https://security.netapp.com/advisory/ntap-20210708-0003/
GLSA-202107-26-Third Party Advisory

Keywords

CVE-2021-30465

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-30465

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures