K33820305: runc vulnerability CVE-2021-30465

🗓️ 21 Feb 2023 18:29:26Reported by f5Type

f5🔗 my.f5.com👁 30 Views

runc before 1.0.0-rc95 allows Container Filesystem Breakout via Directory Traversal exploit.

Reporter	Title	Published	Views	Family All 225
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a cri-o/runc security vulnerability (CVE-2021-30465)	11 Jun 202115:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	26 Mar 202503:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	6 Jan 202606:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5 addresses multiple security vulnerabilities	31 May 202305:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from containerd, gnupg2, runc and IBM WebSphere Application Server Liberty	20 Oct 202212:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2021-30465)	3 Jun 202114:45	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package runc version 1.0.0-alt17.rc95	18 Jun 202100:00	–	altlinux

21 Feb 2023 18:29Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26

CVSS 3.18.5

EPSS0.01473

runc vulnerability container filesystem breakout directory traversal symlink-exchange attack race condition f5 products.