CVE-2021-30465 vulnerability in Linux Foundation and Other Products
Published on May 27, 2021
runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
Products Associated with CVE-2021-30465
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-30465 are published in these products:
Exploit Probability
EPSS
1.47%
Percentile
80.75%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.