runc: vulnerable to symlink exchange attack

🗓️ 26 May 2021 06:05:44Reported by RedHatType

Runc is vulnerable to a symlink exchange attack that binds host files into a container, risking confidentiality, integrity, and availability.

Reporter	Title	Published	Views	Family All 227
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a cri-o/runc security vulnerability (CVE-2021-30465)	11 Jun 202115:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	26 Mar 202503:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	6 Jan 202606:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5 addresses multiple security vulnerabilities	31 May 202305:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from containerd, gnupg2, runc and IBM WebSphere Application Server Liberty	20 Oct 202212:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2021-30465)	3 Jun 202114:45	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package runc version 1.0.0-alt17.rc95	18 Jun 202100:00	–	altlinux
ATTACKERKB	CVE-2021-30465	27 May 202113:15	–	attackerkb

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	7	x86_64	openshift-hyperkube	4.6.0-202105150940.p0.git.9caf8fe.el7	openshift-hyperkube-4.6.0-202105150940.p0.git.9caf8fe.el7.x86_64.rpm
Red Hat Enterprise Linux	8	ppc64le	openshift-hyperkube	4.6.0-202105150940.p0.git.9caf8fe.el8	openshift-hyperkube-4.6.0-202105150940.p0.git.9caf8fe.el8.ppc64le.rpm
Red Hat Enterprise Linux	8	s390x	openshift-hyperkube	4.6.0-202105150940.p0.git.9caf8fe.el8	openshift-hyperkube-4.6.0-202105150940.p0.git.9caf8fe.el8.s390x.rpm
Red Hat Enterprise Linux	8	x86_64	openshift-hyperkube	4.6.0-202105150940.p0.git.9caf8fe.el8	openshift-hyperkube-4.6.0-202105150940.p0.git.9caf8fe.el8.x86_64.rpm
Red Hat Enterprise Linux	7	x86_64	runc	1.0.0-87.rhaos4.6.git23384e2.el7	runc-1.0.0-87.rhaos4.6.git23384e2.el7.x86_64.rpm
Red Hat Enterprise Linux	8	ppc64le	runc	1.0.0-87.rhaos4.6.git23384e2.el8	runc-1.0.0-87.rhaos4.6.git23384e2.el8.ppc64le.rpm
Red Hat Enterprise Linux	8	s390x	runc	1.0.0-87.rhaos4.6.git23384e2.el8	runc-1.0.0-87.rhaos4.6.git23384e2.el8.s390x.rpm
Red Hat Enterprise Linux	8	x86_64	runc	1.0.0-87.rhaos4.6.git23384e2.el8	runc-1.0.0-87.rhaos4.6.git23384e2.el8.x86_64.rpm
Red Hat Enterprise Linux	7	x86_64	runc-debuginfo	1.0.0-87.rhaos4.6.git23384e2.el7	runc-debuginfo-1.0.0-87.rhaos4.6.git23384e2.el7.x86_64.rpm
Red Hat Enterprise Linux	8	ppc64le	runc-debuginfo	1.0.0-87.rhaos4.6.git23384e2.el8	runc-debuginfo-1.0.0-87.rhaos4.6.git23384e2.el8.ppc64le.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2021-30465
access	www.access.redhat.com/security/vulnerabilities/RHSB-2021-004
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-30465
cve	www.cve.org/CVERecord

21 Mar 2026 05:04Current

6.9Medium risk

Vulners AI Score6.9

CVSS 26

CVSS 3.18.5

EPSS0.06604