CVE-2021-30465: Race Condition
Last updated 24 July 2024
Other sources
runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/runcto a version that resolves this vulnerability.Fixed in 1.0.0~rc93+ds1-5+deb11u5Fixed in 1.0.0~rc93+ds1-5+deb11u3Fixed in 1.1.5+ds1-1+deb12u1Fixed in 1.1.15+ds1-2 - Upgrade
Upgrade
alpine/k3sto a version that resolves this vulnerability.Fixed in 1.21.1.1-r0 - Upgrade
Upgrade
alpine/runcto a version that resolves this vulnerability.Fixed in 1.0.0_rc95-r0 - Upgrade
Upgrade
runcto a version that resolves this vulnerability.Fixed in 1.0.0-rc95
Event History
Frequently Asked Questions
What is CVE-2021-30465?
CVE-2021-30465 is a vulnerability in runc before version 1.0.0-rc95 that allows a container filesystem breakout via directory traversal.
How severe is CVE-2021-30465?
CVE-2021-30465 has a severity rating of 8.5 (high).
How can an attacker exploit CVE-2021-30465?
To exploit CVE-2021-30465, an attacker must be able to create multiple containers with a specific mount configuration and perform a symlink-exchange attack that relies on a race condition.
Which versions of runc are affected by CVE-2021-30465?
runc versions before 1.0.0-rc95 are affected by CVE-2021-30465.
Is there a fix for CVE-2021-30465?
Yes, upgrading to runc version 1.0.0-rc95 or later will fix CVE-2021-30465.