CVE-2021-30465: fedoraproject fedora

Modified

AliasesMGASA-2021-0412SUSE-SU-2021:1885-1RHSA-2021:1566+18 more

Published 27-05-2021Last modified 03-08-2024

Vulnerability summary

CVE-2021-30465 is a high (CVSS 8.5) vulnerability in fedoraproject fedora. EPSS estimates a 10.24% chance of exploitation in the next 30 days, higher than 95.6% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 8.5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

8.5/10

010

High · v3.1 (NVD)

EPSS score

10.24%

0%100%

Medium · +3.64 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 13 · Related 12

DLA-3369-1 OPENSUSE-SU-2021:0878-1 OPENSUSE-SU-2021:1404-1 OPENSUSE-SU-2021:1954-1 OPENSUSE-SU-2021:3506-1 OPENSUSE-SU-2024:11358-1+9 more

Timeline

27-05-2021
PublishedVulnerability first disclosed.
03-08-2024
Last modifiedVulnerability information updated.

Description

runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.

CVSS metrics

9 scores · 8 sources · 2 versions

v3.18.5v2.06.0

EPSS trend

Probability

10.24%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

Increase +3.64 pp

From 6.60% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-362Concurrent Execution using Shared Resource with Improper SynchronizationThe product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected systems

Version check

Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat67 products

buildah< 0:1.11.6-8.module+el8.4.0+10193+e90fd8eb | < 0:1.11.6-7.module+el8.2.0+11121+714aca16 | < 0:1.19.7-1.module+el8.4.0+11310+8c67a752 | < 0:1.19.7-2.module+el8.4.0+11311+9da8acfb
buildah-debuginfo< 0:1.11.6-8.module+el8.4.0+10193+e90fd8eb | < 0:1.11.6-7.module+el8.2.0+11121+714aca16 | < 0:1.19.7-1.module+el8.4.0+11310+8c67a752 | < 0:1.19.7-2.module+el8.4.0+11311+9da8acfb
buildah-debugsource< 0:1.11.6-8.module+el8.4.0+10193+e90fd8eb | < 0:1.11.6-7.module+el8.2.0+11121+714aca16 | < 0:1.19.7-1.module+el8.4.0+11310+8c67a752 | < 0:1.19.7-2.module+el8.4.0+11311+9da8acfb
buildah-tests< 0:1.11.6-8.module+el8.4.0+10193+e90fd8eb | < 0:1.11.6-7.module+el8.2.0+11121+714aca16 | < 0:1.19.7-1.module+el8.4.0+11310+8c67a752 | < 0:1.19.7-2.module+el8.4.0+11311+9da8acfb
buildah-tests-debuginfo< 0:1.11.6-8.module+el8.4.0+10193+e90fd8eb | < 0:1.11.6-7.module+el8.2.0+11121+714aca16 | < 0:1.19.7-1.module+el8.4.0+11310+8c67a752 | < 0:1.19.7-2.module+el8.4.0+11311+9da8acfb

cockpit-podman< 0:11-1.module+el8.4.0+10193+e90fd8eb | < 0:11-1.module+el8.2.0+11121+714aca16 | < 0:29-2.module+el8.4.0+11310+8c67a752 | < 0:29-2.module+el8.4.0+11311+9da8acfb
conmon< 2:2.0.15-1.module+el8.4.0+10193+e90fd8eb | < 2:2.0.6-1.module+el8.2.0+11121+714aca16 | < 2:2.0.26-1.module+el8.4.0+11310+8c67a752 | < 2:2.0.26-3.module+el8.4.0+11311+9da8acfb
conmon-debuginfo< 2:2.0.26-1.module+el8.4.0+11310+8c67a752 | < 2:2.0.26-3.module+el8.4.0+11311+9da8acfb
conmon-debugsource< 2:2.0.26-1.module+el8.4.0+11310+8c67a752 | < 2:2.0.26-3.module+el8.4.0+11311+9da8acfb
container-selinux< 2:2.130.0-1.module+el8.4.0+10193+e90fd8eb | < 2:2.124.0-1.module+el8.2.0+11121+714aca16 | < 2:2.158.0-1.module+el8.4.0+11310+8c67a752 | < 2:2.162.0-1.module+el8.4.0+11311+9da8acfb
containernetworking-plugins< 0:0.8.3-4.module+el8.4.0+10193+e90fd8eb | < 0:0.8.3-4.module+el8.2.0+11121+714aca16 | < 0:0.9.1-1.module+el8.4.0+11310+8c67a752 | < 0:0.9.1-1.module+el8.4.0+11311+9da8acfb
containernetworking-plugins-debuginfo< 0:0.8.3-4.module+el8.4.0+10193+e90fd8eb | < 0:0.8.3-4.module+el8.2.0+11121+714aca16 | < 0:0.9.1-1.module+el8.4.0+11310+8c67a752 | < 0:0.9.1-1.module+el8.4.0+11311+9da8acfb
containernetworking-plugins-debugsource< 0:0.8.3-4.module+el8.4.0+10193+e90fd8eb | < 0:0.8.3-4.module+el8.2.0+11121+714aca16 | < 0:0.9.1-1.module+el8.4.0+11310+8c67a752 | < 0:0.9.1-1.module+el8.4.0+11311+9da8acfb
containers-common< 1:0.1.41-4.module+el8.4.0+10193+e90fd8eb | < 1:0.1.40-9.module+el8.2.0+11121+714aca16 | < 1:1.2.2-7.module+el8.4.0+11310+8c67a752 | < 1:1.2.2-10.module+el8.4.0+11311+9da8acfb
crit< 0:3.12-9.module+el8.4.0+10193+e90fd8eb | < 0:3.12-9.module+el8.2.0+11121+714aca16 | < 0:3.15-1.module+el8.4.0+11310+8c67a752 | < 0:3.15-1.module+el8.4.0+11311+9da8acfb
criu< 0:3.12-9.module+el8.4.0+10193+e90fd8eb | < 0:3.12-9.module+el8.2.0+11121+714aca16 | < 0:3.15-1.module+el8.4.0+11310+8c67a752 | < 0:3.15-1.module+el8.4.0+11311+9da8acfb
criu-debuginfo< 0:3.12-9.module+el8.4.0+10193+e90fd8eb | < 0:3.12-9.module+el8.2.0+11121+714aca16 | < 0:3.15-1.module+el8.4.0+11310+8c67a752 | < 0:3.15-1.module+el8.4.0+11311+9da8acfb
criu-debugsource< 0:3.12-9.module+el8.4.0+10193+e90fd8eb | < 0:3.12-9.module+el8.2.0+11121+714aca16 | < 0:3.15-1.module+el8.4.0+11310+8c67a752 | < 0:3.15-1.module+el8.4.0+11311+9da8acfb
crun< 0:0.18-2.module+el8.4.0+11310+8c67a752 | < 0:0.18-2.module+el8.4.0+11311+9da8acfb
crun-debuginfo< 0:0.18-2.module+el8.4.0+11310+8c67a752 | < 0:0.18-2.module+el8.4.0+11311+9da8acfb
crun-debugsource< 0:0.18-2.module+el8.4.0+11310+8c67a752 | < 0:0.18-2.module+el8.4.0+11311+9da8acfb
docker< 2:1.13.1-206.git7d71120.el7_9
docker-client< 2:1.13.1-206.git7d71120.el7_9
docker-common< 2:1.13.1-206.git7d71120.el7_9
docker-debuginfo< 2:1.13.1-206.git7d71120.el7_9
docker-logrotate< 2:1.13.1-206.git7d71120.el7_9
docker-lvm-plugin< 2:1.13.1-206.git7d71120.el7_9
docker-novolume-plugin< 2:1.13.1-206.git7d71120.el7_9
docker-rhel-push-plugin< 2:1.13.1-206.git7d71120.el7_9
docker-v1.10-migrator< 2:1.13.1-206.git7d71120.el7_9
fuse-overlayfs< 0:0.7.8-1.module+el8.4.0+10193+e90fd8eb | < 0:0.7.2-5.module+el8.2.0+11121+714aca16 | < 0:1.4.0-2.module+el8.4.0+11310+8c67a752 | < 0:1.4.0-3.module+el8.4.0+11311+9da8acfb
fuse-overlayfs-debuginfo< 0:0.7.8-1.module+el8.4.0+10193+e90fd8eb | < 0:0.7.2-5.module+el8.2.0+11121+714aca16 | < 0:1.4.0-2.module+el8.4.0+11310+8c67a752 | < 0:1.4.0-3.module+el8.4.0+11311+9da8acfb
fuse-overlayfs-debugsource< 0:0.7.8-1.module+el8.4.0+10193+e90fd8eb | < 0:0.7.2-5.module+el8.2.0+11121+714aca16 | < 0:1.4.0-2.module+el8.4.0+11310+8c67a752 | < 0:1.4.0-3.module+el8.4.0+11311+9da8acfb
libslirp< 0:4.3.1-1.module+el8.4.0+11310+8c67a752 | < 0:4.3.1-1.module+el8.4.0+11311+9da8acfb
libslirp-debuginfo< 0:4.3.1-1.module+el8.4.0+11310+8c67a752 | < 0:4.3.1-1.module+el8.4.0+11311+9da8acfb
libslirp-debugsource< 0:4.3.1-1.module+el8.4.0+11310+8c67a752 | < 0:4.3.1-1.module+el8.4.0+11311+9da8acfb
libslirp-devel< 0:4.3.1-1.module+el8.4.0+11310+8c67a752 | < 0:4.3.1-1.module+el8.4.0+11311+9da8acfb
oci-seccomp-bpf-hook< 0:1.2.0-1.module+el8.4.0+11310+8c67a752 | < 0:1.2.0-2.module+el8.4.0+11311+9da8acfb
oci-seccomp-bpf-hook-debuginfo< 0:1.2.0-1.module+el8.4.0+11310+8c67a752 | < 0:1.2.0-2.module+el8.4.0+11311+9da8acfb
oci-seccomp-bpf-hook-debugsource< 0:1.2.0-1.module+el8.4.0+11310+8c67a752 | < 0:1.2.0-2.module+el8.4.0+11311+9da8acfb
openshift< 0:4.6.0-202105150940.p0.git.9caf8fe.el7 | < 0:4.6.0-202105150940.p0.git.9caf8fe.el8 | < 0:4.5.0-202105121820.p0.git.d8ef5ad.el7 | < 0:4.5.0-202105121820.p0.git.d8ef5ad.el8
openshift-hyperkube< 0:4.6.0-202105150940.p0.git.9caf8fe.el7 | < 0:4.6.0-202105150940.p0.git.9caf8fe.el8 | < 0:4.5.0-202105121820.p0.git.d8ef5ad.el7 | < 0:4.5.0-202105121820.p0.git.d8ef5ad.el8
podman< 0:1.6.4-26.module+el8.4.0+10193+e90fd8eb | < 0:1.6.4-19.module+el8.2.0+11121+714aca16 | < 0:3.0.1-6.module+el8.4.0+11310+8c67a752 | < 0:3.0.1-7.module+el8.4.0+11311+9da8acfb
podman-catatonit< 0:3.0.1-6.module+el8.4.0+11310+8c67a752 | < 0:3.0.1-7.module+el8.4.0+11311+9da8acfb
podman-catatonit-debuginfo< 0:3.0.1-6.module+el8.4.0+11310+8c67a752 | < 0:3.0.1-7.module+el8.4.0+11311+9da8acfb
podman-debuginfo< 0:1.6.4-26.module+el8.4.0+10193+e90fd8eb | < 0:1.6.4-19.module+el8.2.0+11121+714aca16 | < 0:3.0.1-6.module+el8.4.0+11310+8c67a752 | < 0:3.0.1-7.module+el8.4.0+11311+9da8acfb
podman-debugsource< 0:1.6.4-26.module+el8.4.0+10193+e90fd8eb | < 0:1.6.4-19.module+el8.2.0+11121+714aca16 | < 0:3.0.1-6.module+el8.4.0+11310+8c67a752 | < 0:3.0.1-7.module+el8.4.0+11311+9da8acfb
podman-docker< 0:1.6.4-26.module+el8.4.0+10193+e90fd8eb | < 0:1.6.4-19.module+el8.2.0+11121+714aca16 | < 0:3.0.1-6.module+el8.4.0+11310+8c67a752 | < 0:3.0.1-7.module+el8.4.0+11311+9da8acfb
podman-plugins< 0:3.0.1-6.module+el8.4.0+11310+8c67a752 | < 0:3.0.1-7.module+el8.4.0+11311+9da8acfb
podman-plugins-debuginfo< 0:3.0.1-6.module+el8.4.0+11310+8c67a752 | < 0:3.0.1-7.module+el8.4.0+11311+9da8acfb
podman-remote< 0:1.6.4-26.module+el8.4.0+10193+e90fd8eb | < 0:1.6.4-19.module+el8.2.0+11121+714aca16 | < 0:3.0.1-6.module+el8.4.0+11310+8c67a752 | < 0:3.0.1-7.module+el8.4.0+11311+9da8acfb
podman-remote-debuginfo< 0:1.6.4-26.module+el8.4.0+10193+e90fd8eb | < 0:1.6.4-19.module+el8.2.0+11121+714aca16 | < 0:3.0.1-6.module+el8.4.0+11310+8c67a752 | < 0:3.0.1-7.module+el8.4.0+11311+9da8acfb
podman-tests< 0:1.6.4-26.module+el8.4.0+10193+e90fd8eb | < 0:1.6.4-19.module+el8.2.0+11121+714aca16 | < 0:3.0.1-6.module+el8.4.0+11310+8c67a752 | < 0:3.0.1-7.module+el8.4.0+11311+9da8acfb
python-podman-api< 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+10193+e90fd8eb | < 0:1.2.0-0.2.gitd0a45fe.module+el8.2.0+11121+714aca16
python3-criu< 0:3.12-9.module+el8.4.0+10193+e90fd8eb | < 0:3.12-9.module+el8.2.0+11121+714aca16 | < 0:3.15-1.module+el8.4.0+11310+8c67a752 | < 0:3.15-1.module+el8.4.0+11311+9da8acfb
runc< 0:1.0.0-87.rhaos4.6.git23384e2.el7 | < 0:1.0.0-87.rhaos4.6.git23384e2.el8 | < 0:1.0.0-74.rhaos4.5.gitd2c3b70.el7 | < 0:1.0.0-74.rhaos4.5.gitd2c3b70.el8 | < 0:1.0.0-69.rc10.el7_9 | < 0:1.0.0-65.rc10.module+el8.4.0+11031+7edfb656 | < 0:1.0.0-65.rc10.module+el8.2.0+11121+714aca16 | < 0:1.0.0-71.rc92.module+el8.4.0+11310+8c67a752 | < 0:1.0.0-73.rc93.module+el8.4.0+11311+9da8acfb
runc-debuginfo< 0:1.0.0-87.rhaos4.6.git23384e2.el7 | < 0:1.0.0-87.rhaos4.6.git23384e2.el8 | < 0:1.0.0-74.rhaos4.5.gitd2c3b70.el7 | < 0:1.0.0-74.rhaos4.5.gitd2c3b70.el8 | < 0:1.0.0-69.rc10.el7_9 | < 0:1.0.0-65.rc10.module+el8.4.0+11031+7edfb656 | < 0:1.0.0-65.rc10.module+el8.2.0+11121+714aca16 | < 0:1.0.0-71.rc92.module+el8.4.0+11310+8c67a752 | < 0:1.0.0-73.rc93.module+el8.4.0+11311+9da8acfb
runc-debugsource< 0:1.0.0-87.rhaos4.6.git23384e2.el8 | < 0:1.0.0-74.rhaos4.5.gitd2c3b70.el8 | < 0:1.0.0-65.rc10.module+el8.4.0+11031+7edfb656 | < 0:1.0.0-65.rc10.module+el8.2.0+11121+714aca16 | < 0:1.0.0-71.rc92.module+el8.4.0+11310+8c67a752 | < 0:1.0.0-73.rc93.module+el8.4.0+11311+9da8acfb
skopeo< 1:0.1.41-4.module+el8.4.0+10193+e90fd8eb | < 1:0.1.40-9.module+el8.2.0+11121+714aca16 | < 1:1.2.2-7.module+el8.4.0+11310+8c67a752 | < 1:1.2.2-10.module+el8.4.0+11311+9da8acfb
skopeo-debuginfo< 1:0.1.41-4.module+el8.4.0+10193+e90fd8eb | < 1:0.1.40-9.module+el8.2.0+11121+714aca16 | < 1:1.2.2-7.module+el8.4.0+11310+8c67a752 | < 1:1.2.2-10.module+el8.4.0+11311+9da8acfb
skopeo-debugsource< 1:0.1.41-4.module+el8.4.0+10193+e90fd8eb | < 1:0.1.40-9.module+el8.2.0+11121+714aca16 | < 1:1.2.2-7.module+el8.4.0+11310+8c67a752 | < 1:1.2.2-10.module+el8.4.0+11311+9da8acfb
skopeo-tests< 1:0.1.41-4.module+el8.4.0+10193+e90fd8eb | < 1:0.1.40-9.module+el8.2.0+11121+714aca16 | < 1:1.2.2-7.module+el8.4.0+11310+8c67a752 | < 1:1.2.2-10.module+el8.4.0+11311+9da8acfb
slirp4netns< 0:0.4.2-3.git21fdece.module+el8.4.0+10193+e90fd8eb | < 0:0.4.2-3.git21fdece.module+el8.2.0+11121+714aca16 | < 0:1.1.8-1.module+el8.4.0+11310+8c67a752 | < 0:1.1.8-1.module+el8.4.0+11311+9da8acfb
slirp4netns-debuginfo< 0:0.4.2-3.git21fdece.module+el8.4.0+10193+e90fd8eb | < 0:0.4.2-3.git21fdece.module+el8.2.0+11121+714aca16 | < 0:1.1.8-1.module+el8.4.0+11310+8c67a752 | < 0:1.1.8-1.module+el8.4.0+11311+9da8acfb
slirp4netns-debugsource< 0:0.4.2-3.git21fdece.module+el8.4.0+10193+e90fd8eb | < 0:0.4.2-3.git21fdece.module+el8.2.0+11121+714aca16 | < 0:1.1.8-1.module+el8.4.0+11310+8c67a752 | < 0:1.1.8-1.module+el8.4.0+11311+9da8acfb
toolbox< 0:0.0.7-1.module+el8.4.0+10193+e90fd8eb | < 0:0.0.7-1.module+el8.2.0+11121+714aca16 | < 0:0.0.8-1.module+el8.4.0+11310+8c67a752 | < 0:0.0.8-1.module+el8.4.0+11311+9da8acfb
udica< 0:0.2.1-2.module+el8.4.0+10193+e90fd8eb | < 0:0.2.1-2.module+el8.2.0+11121+714aca16 | < 0:0.2.4-1.module+el8.4.0+11310+8c67a752 | < 0:0.2.4-1.module+el8.4.0+11311+9da8acfb

Show all 67

Alpine2 products

k3s< 1.21.1.1-r0
runc< 1.0.0_rc95-r0

Chainguard2 products

runcAll versions (No fix recorded)
runc-docAll versions (No fix recorded)

Wolfi2 products

runcAll versions (No fix recorded)
runc-docAll versions (No fix recorded)

Debian1 product

runc< 1.0.0~rc93+ds1-5

Fedoraproject1 product

fedoraEOL33 | 34

Github.com/opencontainers1 product

runc< 1.0.0-rc95

Linuxfoundation1 product

runc≤ 0.1.1 | 1.0.0:rc1 | 1.0.0:rc10 | 1.0.0:rc2 | 1.0.0:rc3 | 1.0.0:rc4 | 1.0.0:rc5 | 1.0.0:rc6 | 1.0.0:rc7 | 1.0.0:rc8 | 1.0.0:rc9 | 1.0.0:rc90 | 1.0.0:rc91 | 1.0.0:rc92 | 1.0.0:rc93 | 1.0.0:rc94

Mageia1 product

opencontainers-runc< 1.0.2-1.mga8

Suse1 product

runc&distro=SUSE Linux Enterprise Module for Containers 12< 1.0.0~rc93-16.11.1

Ubuntu1 product

runc< 1.0.0~rc93-0ubuntu1~18.04.2 | < 1.0.0~rc93-0ubuntu1~20.04.2 | < 1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm2

11 vendors · 80 products

References

57 links

github.com/opencontainers/runc/releasesAdvisoryWEBRelease NotesThird Party Advisory
www.openwall.com/lists/oss-security/2021/05/19/2Mailing ListAdvisoryWEBThird Party Advisory
github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7rAdvisoryARTICLEREPORTFIXWEBPatchThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryWEB
lists.fedoraproject.org/archives/…Vendor AdvisoryWEB
github.com/opencontainers/runc/commit/0ca91f44f1664da834bc61115a849b56d22f595fFIXWEBPatchThird Party Advisory
bugzilla.opensuse.org/show_bug.cgi?id=1185405REPORTWEBIssue Tracking
security.netapp.com/advisory/ntap-20210708-0003/AdvisoryThird Party Advisory
security.gentoo.org/glsa/202107-26Vendor AdvisoryAdvisoryWEBThird Party Advisory
lists.debian.org/debian-lts-announce/2023/03/msg00023.htmlMailing ListWEB

Show all 57 references