runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
CVSS Details
- CVSS 3.1 Base Score: 8.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containernetworking-pluginsUpgrade python3-criuUpgrade skopeoUpgrade containers-commonUpgrade skopeo-testsUpgrade libslirp-develUpgrade conmonUpgrade fuse-overlayfsUpgrade udicaUpgrade slirp4netnsUpgrade criuUpgrade container-selinuxUpgrade libslirpUpgrade toolboxUpgrade cockpit-podmanUpgrade critUpgrade python-podman-api | May 4, 2022 | May 27, 2021 |
| Alpine Linux | — | Upgrade k3sUpgrade runc | Aug 22, 2024 | May 27, 2021 |
| Amazon Linux Ami 2 | — | Upgrade runc-debuginfoUpgrade runc | Jul 4, 2022 | May 27, 2021 |
| Amazon_linux | — | Upgrade runc | May 20, 2021 | May 14, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 27, 2021 |
| Centos_linux | — | Upgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade conmon-debugsourceUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade crun-debuginfoUpgrade libslirp-develUpgrade docker-debuginfoUpgrade docker-novolume-pluginUpgrade docker-commonUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade docker-clientUpgrade python-podman-apiUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade criuUpgrade docker-logrotateUpgrade dockerUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade podmanUpgrade podman-debuginfoUpgrade libslirpUpgrade docker-rhel-push-pluginUpgrade toolboxUpgrade skopeo-testsUpgrade skopeoUpgrade podman-remoteUpgrade podman-debugsourceUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-dockerUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade critUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade container-selinuxUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade docker-lvm-pluginUpgrade conmonUpgrade udicaUpgrade docker-v1.10-migratorUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-pluginsUpgrade crunUpgrade buildah-debugsourceUpgrade skopeo-debuginfoUpgrade runcUpgrade podman-plugins-debuginfo | Jun 1, 2021 | May 27, 2021 |
| Debian | — | Upgrade runc | Mar 29, 2023 | May 27, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/runc. | Jul 12, 2021 | May 27, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engine | Jul 18, 2023 | May 27, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade docker-engine | Aug 10, 2021 | May 27, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade docker-engineUpgrade docker-engine-selinux | Sep 29, 2021 | May 27, 2021 |
| Oracle_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade crunUpgrade skopeo-testsUpgrade skopeoUpgrade containernetworking-pluginsUpgrade critUpgrade containers-commonUpgrade container-selinuxUpgrade docker-engineUpgrade podman-pluginsUpgrade libslirp-develUpgrade podmanUpgrade podman-remoteUpgrade conmonUpgrade udicaUpgrade slirp4netnsUpgrade python-podman-apiUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade buildahUpgrade podman-testsUpgrade runcUpgrade cockpit-podmanUpgrade podman-dockerUpgrade criuUpgrade podman-catatonitUpgrade libslirpUpgrade docker-cli | Jun 11, 2021 | May 19, 2021 |
| Redhat Openshift | — | Upgrade python-ironic-prometheus-exporterUpgrade runcUpgrade python-oslo-concurrencyUpgrade openstack-ironic-inspectorUpgrade python-oslo-policyUpgrade jenkinsUpgrade python-oslo-i18nUpgrade podmanUpgrade python-oslo-dbUpgrade python-openshiftUpgrade openstack-ironicUpgrade openshift-kuryrUpgrade python-oslo-logUpgrade ovn2.13Upgrade atomic-openshift-service-idlerUpgrade python-oslo-configUpgrade ironic-images-ipa-ppc64leUpgrade kata-containersUpgrade python-openstacksdkUpgrade ironic-images-ipa-x86_64Upgrade ironic-imagesUpgrade python-oslo-upgradecheckUpgrade python-kubernetesUpgrade python-oslo-serviceUpgrade openshift-ansibleUpgrade openvswitch2.15Upgrade jenkins-2-pluginsUpgrade openstack-ironic-python-agentUpgrade python-stevedoreUpgrade haproxyUpgrade openshift-clientsUpgrade python-oslo-serializationUpgrade rteval-loadsUpgrade ignitionUpgrade python-keystoneauth1Upgrade cri-toolsUpgrade python-hardwareUpgrade python-jsonschemaUpgrade rust-afterburnUpgrade python-toozUpgrade python-oslo-utilsUpgrade coreos-installerUpgrade redhat-release-coreosUpgrade openshiftUpgrade python-ironic-libUpgrade python-eventletUpgrade cri-oUpgrade python-debtcollectorUpgrade console-login-helper-messagesUpgrade butaneUpgrade ostreeUpgrade python-sushyUpgrade python-sushy-oem-idracUpgrade toolboxUpgrade python-pyrsistentUpgrade python-oslo-context | May 25, 2021 | May 19, 2021 |
| Redhat_linux | — | Upgrade crun-debugsourceUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade toolboxUpgrade conmon-debugsourceUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade python-podman-apiUpgrade podman-remote-debuginfoUpgrade skopeo-testsUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade runc-debugsourceUpgrade libslirp-develUpgrade slirp4netnsUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade udicaUpgrade podman-debugsourceUpgrade podman-dockerUpgrade slirp4netns-debugsourceUpgrade skopeo-debuginfoUpgrade crunUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade podman-plugins-debuginfoUpgrade podmanUpgrade buildah-testsUpgrade slirp4netns-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criuNo solution existsUpgrade critUpgrade buildahUpgrade cockpit-podmanUpgrade podman-remoteUpgrade podman-testsUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade skopeoUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfsUpgrade runcUpgrade skopeo-debugsource | Jun 1, 2021 | May 27, 2021 |
| Rocky_linux | — | Upgrade criu-debugsourceUpgrade skopeoUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-debuginfoUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade podmanUpgrade libslirp-develUpgrade runcUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-catatonitUpgrade critUpgrade python3-criuUpgrade criuUpgrade podman-remote-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade containers-commonUpgrade libslirp-debuginfoUpgrade buildahUpgrade crunUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade conmonUpgrade podman-testsUpgrade podman-pluginsUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-debugsourceUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade conmon-debugsourceUpgrade skopeo-testsUpgrade libslirp | May 5, 2022 | May 27, 2021 |
| Suse | — | Upgrade docker-fish-completionUpgrade docker-kubic-bash-completionUpgrade runcUpgrade docker-bash-completionUpgrade docker-kubic-fish-completionUpgrade docker-kubicUpgrade docker-kubic-zsh-completionUpgrade docker-kubic-kubeadm-criconfigUpgrade docker-zsh-completionUpgrade containerd-ctrUpgrade dockerUpgrade containerd | Jun 12, 2021 | May 14, 2021 |
| Ubuntu | — | Upgrade runcUpgrade runc (Ubuntu Pro) | May 20, 2021 | May 14, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub