runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
CVSS Details
- CVSS 3.1 Base Score: 8.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirp-develUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade skopeo-testsUpgrade skopeoUpgrade python3-criuUpgrade slirp4netnsUpgrade libslirpUpgrade udicaUpgrade python-podman-apiUpgrade container-selinuxUpgrade fuse-overlayfsUpgrade criuUpgrade conmonUpgrade toolboxUpgrade cockpit-podmanUpgrade crit | May 4, 2022 | May 27, 2021 |
| Alpine Linux | — | Upgrade k3sUpgrade runc | Aug 22, 2024 | May 27, 2021 |
| Amazon Linux Ami 2 | — | Upgrade runc-debuginfoUpgrade runc | Jul 4, 2022 | May 27, 2021 |
| Amazon_linux | — | Upgrade runc | May 20, 2021 | May 14, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 27, 2021 |
| Centos_linux | — | Upgrade podman-remote-debuginfoUpgrade critUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade skopeoUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-debuginfoUpgrade podman-debugsourceUpgrade runcUpgrade podman-dockerUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade libslirp-debuginfoUpgrade docker-v1.10-migratorUpgrade container-selinuxUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsourceUpgrade udicaUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade docker-rhel-push-pluginUpgrade conmonUpgrade docker-lvm-pluginUpgrade podman-testsUpgrade python3-criuUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade crunUpgrade criu-debuginfoUpgrade criuUpgrade docker-clientUpgrade oci-seccomp-bpf-hookUpgrade python-podman-apiUpgrade containers-commonUpgrade conmon-debugsourceUpgrade podmanUpgrade libslirp-develUpgrade fuse-overlayfs-debugsourceUpgrade docker-novolume-pluginUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade docker-logrotateUpgrade dockerUpgrade podman-catatonitUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade buildahUpgrade crun-debuginfoUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade skopeo-debugsourceUpgrade docker-debuginfoUpgrade docker-commonUpgrade crun-debugsourceUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfo | Jun 1, 2021 | May 27, 2021 |
| Debian | — | Upgrade runc | Mar 29, 2023 | May 27, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/runc. | Jul 12, 2021 | May 27, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engine | Jul 18, 2023 | May 27, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade docker-engine | Aug 10, 2021 | May 27, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade docker-engineUpgrade docker-engine-selinux | Sep 29, 2021 | May 27, 2021 |
| Oracle_linux | — | Upgrade podman-pluginsUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade python3-criuUpgrade container-selinuxUpgrade docker-engineUpgrade skopeo-testsUpgrade crunUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podman-remoteUpgrade conmonUpgrade critUpgrade skopeoUpgrade buildah-testsUpgrade podman-catatonitUpgrade runcUpgrade slirp4netnsUpgrade udicaUpgrade buildahUpgrade podman-testsUpgrade python-podman-apiUpgrade podman-dockerUpgrade cockpit-podmanUpgrade criuUpgrade docker-cliUpgrade libslirpUpgrade fuse-overlayfs | Jun 11, 2021 | May 19, 2021 |
| Redhat Openshift | — | Upgrade python-eventletUpgrade python-ironic-libUpgrade console-login-helper-messagesUpgrade redhat-release-coreosUpgrade python-hardwareUpgrade python-sushyUpgrade ostreeUpgrade cri-oUpgrade python-debtcollectorUpgrade cri-toolsUpgrade haproxyUpgrade python-oslo-utilsUpgrade python-oslo-contextUpgrade toolboxUpgrade python-sushy-oem-idracUpgrade rust-afterburnUpgrade python-pyrsistentUpgrade openstack-ironic-python-agentUpgrade python-jsonschemaUpgrade python-oslo-serializationUpgrade coreos-installerUpgrade ignitionUpgrade rteval-loadsUpgrade python-toozUpgrade openshiftUpgrade openshift-clientsUpgrade python-keystoneauth1Upgrade python-stevedoreUpgrade butaneUpgrade python-oslo-serviceUpgrade atomic-openshift-service-idlerUpgrade python-ironic-prometheus-exporterUpgrade podmanUpgrade openstack-ironicUpgrade ovn2.13Upgrade python-oslo-i18nUpgrade python-oslo-dbUpgrade python-openshiftUpgrade openshift-ansibleUpgrade python-openstacksdkUpgrade kata-containersUpgrade python-oslo-upgradecheckUpgrade runcUpgrade python-kubernetesUpgrade ironic-images-ipa-ppc64leUpgrade openshift-kuryrUpgrade python-oslo-concurrencyUpgrade jenkins-2-pluginsUpgrade ironic-imagesUpgrade python-oslo-policyUpgrade python-oslo-logUpgrade ironic-images-ipa-x86_64Upgrade jenkinsUpgrade openstack-ironic-inspectorUpgrade python-oslo-configUpgrade openvswitch2.15 | May 25, 2021 | May 19, 2021 |
| Redhat_linux | — | Upgrade criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-debuginfoUpgrade buildahUpgrade critUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade podman-dockerUpgrade crunUpgrade slirp4netns-debuginfoUpgrade skopeo-debugsourceUpgrade skopeoUpgrade podman-testsUpgrade slirp4netns-debugsourceUpgrade podman-debugsourceUpgrade cockpit-podmanUpgrade podmanUpgrade libslirp-debugsourceUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade runcUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoNo solution existsUpgrade skopeo-debuginfoUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade udicaUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade libslirp-develUpgrade fuse-overlayfs-debugsourceUpgrade podman-remote-debuginfoUpgrade runc-debugsourceUpgrade crun-debugsourceUpgrade buildah-tests-debuginfoUpgrade libslirpUpgrade conmonUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade buildah-debuginfoUpgrade containers-commonUpgrade python-podman-apiUpgrade criu-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook | Jun 1, 2021 | May 27, 2021 |
| Rocky_linux | — | Upgrade crunUpgrade libslirp-debugsourceUpgrade skopeo-testsUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade podman-testsUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade podman-pluginsUpgrade conmon-debugsourceUpgrade podman-catatonit-debuginfoUpgrade crun-debuginfoUpgrade libslirpUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debuginfoUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade crun-debugsourceUpgrade skopeoUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade podman-catatonitUpgrade critUpgrade podman-remoteUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-pluginsUpgrade podman-debugsourceUpgrade buildahUpgrade criuUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade slirp4netns-debuginfoUpgrade runcUpgrade podmanUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade criu-debuginfo | May 5, 2022 | May 27, 2021 |
| Suse | — | Upgrade docker-bash-completionUpgrade docker-kubic-kubeadm-criconfigUpgrade docker-zsh-completionUpgrade docker-kubicUpgrade containerdUpgrade containerd-ctrUpgrade docker-kubic-zsh-completionUpgrade docker-kubic-fish-completionUpgrade dockerUpgrade docker-fish-completionUpgrade docker-kubic-bash-completionUpgrade runc | Jun 12, 2021 | May 14, 2021 |
| Ubuntu | — | Upgrade runcUpgrade runc (Ubuntu Pro) | May 20, 2021 | May 14, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub