Skip to content
OpenAdvisories
High ELSA-2021-14902 1 CVE

Important: runc security update (Oracle Linux 7)

Published Jun 11, 2021 · Updated Jun 11, 2021

Ecosystem: Oracle Linux

Summary

[1.0.0-1.rc95]
- Addresses CVE-2021-30465

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 runc 3:1.0.0-1.rc95.el7

Vulnerabilities 1

  • High 7.6
    CVE-2021-30465 EPSS 10%

    mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs

    runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange a…

    buildah runc github.com/opencontainers/runc k3s Debian Ubuntu Azure Linux Alpine Go