CVE-2021-30465 affecting package buildah for versions less than 1.41.4-2

CVE-2021-30465 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

SUSE CVE-2021-30465

runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition...

CVE-2021-30465

creationtimestamp| type| source ---|---|--- 2021-05-20 06:19:57+00:00| seen| https://t.me/k8security/298 2021-05-31 12:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3501...