CVE catalog

CVE-2021-30465

runc: CVE-2021-30465

[CVE catalog]

Severity
High · CVSS 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
10.24% · Oct 25, 2026

runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianruncsid1.3.6+ds1-1fixed
Debianruncforky1.3.6+ds1-1fixed
Debianrunctrixie1.1.15+ds1-2fixed
Debianruncbookworm1.1.5+ds1-1+deb12u1fixed
Debianruncbookworm-security1.1.5+ds1-1+deb12u1fixed
Ubunturunc18.041.0.0~rc2+docker1.13.1-0ubuntu1vulnerable
Ubunturunc18.041.0.0~rc4+dfsg1-2vulnerable
Ubunturunc18.041.0.0~rc4+dfsg1-6vulnerable
Ubunturunc18.041.0.0~rc4+dfsg1-6ubuntu0.18.04.1vulnerable
Ubunturunc18.041.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.1vulnerable
Ubunturunc18.041.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.2vulnerable
Ubunturunc18.041.0.0~rc10-0ubuntu1~18.04.1vulnerable
Ubunturunc18.041.0.0~rc10-0ubuntu1~18.04.2vulnerable
Ubunturunc18.041.0.0~rc93-0ubuntu1~18.04.1vulnerable
Ubunturunc18.041.0.0~rc93-0ubuntu1~18.04.2fixed
Ubunturunc20.041.0.0~rc8+git20190923.3e425f80-0ubuntu1vulnerable
Ubunturunc20.041.0.0~rc10-0ubuntu1vulnerable
Ubunturunc20.041.0.0~rc93-0ubuntu1~20.04.1vulnerable
Ubunturunc20.041.0.0~rc93-0ubuntu1~20.04.2fixed
Opensusecontainerdleap 15.21.4.11-lp152.2.12.1fixed
Opensusedockerleap 15.220.10.9_ce-lp152.2.18.1fixed
Opensuseruncleap 15.21.0.2-lp152.2.9.1fixed
Susecontainerdlinux enterprise module for containers 15 sp21.4.11-56.1fixed
Susedockerlinux enterprise module for containers 15 sp220.10.9_ce-156.1fixed
Suserunclinux enterprise module for containers 15 sp21.0.2-23.1fixed
Susecontainerdlinux enterprise module for containers 15 sp31.4.11-56.1fixed
Susedockerlinux enterprise module for containers 15 sp320.10.9_ce-156.1fixed
Suserunclinux enterprise module for containers 15 sp31.0.2-23.1fixed
Susecontainerdlinux enterprise high performance computing 15-espos1.4.11-56.1fixed
Susedockerlinux enterprise high performance computing 15-espos20.10.9_ce-156.1fixed
Suserunclinux enterprise high performance computing 15-espos1.0.2-23.1fixed
Susecontainerdlinux enterprise high performance computing 15-ltss1.4.11-56.1fixed
Susedockerlinux enterprise high performance computing 15-ltss20.10.9_ce-156.1fixed
Suserunclinux enterprise high performance computing 15-ltss1.0.2-23.1fixed
Susecontainerdlinux enterprise high performance computing 15 sp1-espos1.4.11-56.1fixed
Susedockerlinux enterprise high performance computing 15 sp1-espos20.10.9_ce-156.1fixed
Suserunclinux enterprise high performance computing 15 sp1-espos1.0.2-23.1fixed
Susecontainerdlinux enterprise high performance computing 15 sp1-ltss1.4.11-56.1fixed
Susedockerlinux enterprise high performance computing 15 sp1-ltss20.10.9_ce-156.1fixed
Suserunclinux enterprise high performance computing 15 sp1-ltss1.0.2-23.1fixed
Susecontainerdlinux enterprise server 15-ltss1.4.11-56.1fixed
Susedockerlinux enterprise server 15-ltss20.10.9_ce-156.1fixed
Suserunclinux enterprise server 15-ltss1.0.2-23.1fixed
Susecontainerdlinux enterprise server 15 sp1-bcl1.4.11-56.1fixed
Susedockerlinux enterprise server 15 sp1-bcl20.10.9_ce-156.1fixed
Suserunclinux enterprise server 15 sp1-bcl1.0.2-23.1fixed
Susecontainerdlinux enterprise server 15 sp1-ltss1.4.11-56.1fixed
Susedockerlinux enterprise server 15 sp1-ltss20.10.9_ce-156.1fixed
Suserunclinux enterprise server 15 sp1-ltss1.0.2-23.1fixed
Susecontainerdlinux enterprise server for sap applications 151.4.11-56.1fixed
Susedockerlinux enterprise server for sap applications 1520.10.9_ce-156.1fixed
Suserunclinux enterprise server for sap applications 151.0.2-23.1fixed
Susecontainerdlinux enterprise server for sap applications 15 sp11.4.11-56.1fixed
Susedockerlinux enterprise server for sap applications 15 sp120.10.9_ce-156.1fixed
Suserunclinux enterprise server for sap applications 15 sp11.0.2-23.1fixed
Susecontainerdlinux enterprise micro 5.01.4.11-56.1fixed
Susedockerlinux enterprise micro 5.020.10.9_ce-156.1fixed
Suserunclinux enterprise micro 5.01.0.2-23.1fixed
Susecontainerdlinux enterprise micro 5.11.4.11-56.1fixed
Susedockerlinux enterprise micro 5.120.10.9_ce-156.1fixed
Suserunclinux enterprise micro 5.11.0.2-23.1fixed
Susecontainerdenterprise storage 61.4.11-56.1fixed
Susedockerenterprise storage 620.10.9_ce-156.1fixed
Suseruncenterprise storage 61.0.2-23.1fixed
Suseruncenterprise storage 71.0.2-23.1fixed
Suserunclinux enterprise module for containers 121.0.0~rc93-16.11.1fixed
Ubunturuncpro0.0.8+dfsg-2vulnerable
Ubunturuncpro0.1.1-0ubuntu5~16.04vulnerable
Ubunturuncpro1.0.0~rc1-0ubuntu1~16.04vulnerable
Ubunturuncpro1.0.0~rc1-0ubuntu2~16.04.1vulnerable
Ubunturuncpro1.0.0~rc1-0ubuntu2~16.04.1.1vulnerable
Ubunturuncpro1.0.0~rc2-0ubuntu2~16.04.1vulnerable
Ubunturuncpro1.0.0~rc2+docker1.12.6-0ubuntu1~16.04.1vulnerable
Ubunturuncpro1.0.0~rc2+docker1.13.1-0ubuntu1~16.04.1vulnerable
Ubunturuncpro1.0.0~rc2+docker1.13.1-0ubuntu1~16.04.2vulnerable
Ubunturuncpro1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.3vulnerable
Ubunturuncpro1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4vulnerable
Ubunturuncpro1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm1vulnerable
Ubunturuncpro1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm2fixed
Ubunturunc18.041.0.0~rc2+docker1.13.1-0ubuntu1vulnerable
Ubunturunc18.041.0.0~rc4+dfsg1-2vulnerable
Ubunturunc18.041.0.0~rc4+dfsg1-6vulnerable
Ubunturunc18.041.0.0~rc4+dfsg1-6ubuntu0.18.04.1vulnerable
Ubunturunc18.041.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.1vulnerable
Ubunturunc18.041.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.2vulnerable
Ubunturunc18.041.0.0~rc10-0ubuntu1~18.04.1vulnerable
Ubunturunc18.041.0.0~rc10-0ubuntu1~18.04.2vulnerable
Ubunturunc18.041.0.0~rc93-0ubuntu1~18.04.1vulnerable
Ubunturunc18.041.0.0~rc93-0ubuntu1~18.04.2fixed
Ubunturunc20.041.0.0~rc8+git20190923.3e425f80-0ubuntu1vulnerable
Ubunturunc20.041.0.0~rc10-0ubuntu1vulnerable
Ubunturunc20.041.0.0~rc93-0ubuntu1~20.04.1vulnerable
Ubunturunc20.041.0.0~rc93-0ubuntu1~20.04.2fixed
Opensusecontainerdleap 15.31.4.11-56.1fixed
Opensusedockerleap 15.320.10.9_ce-156.1fixed
Opensusedocker-kubicleap 15.320.10.9_ce-156.1fixed
Opensuseruncleap 15.31.0.2-23.1fixed
Susecontainerdlinux enterprise module for containers 121.4.11-16.45.1fixed
Susedockerlinux enterprise module for containers 1220.10.9_ce-98.72.1fixed
Suserunclinux enterprise module for containers 121.0.2-16.14.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianruncsourcesid1.0.0~rc93+ds1-5not yet assignedNot reported[988768]
Debianruncsourceforky1.0.0~rc93+ds1-5not yet assignedNot reported[988768]
Debianruncsourcetrixie1.0.0~rc93+ds1-5not yet assignedNot reported[988768]
Debianruncsourcebookworm1.0.0~rc93+ds1-5not yet assignedNot reported[988768]
Ubunturuncdeb18.041.0.0~rc93-0ubuntu1~18.04.2Not reportedUSN-4960-1Not reported
Ubunturuncdeb20.041.0.0~rc93-0ubuntu1~20.04.2Not reportedUSN-4960-1Not reported
Opensusecontainerdrpmleap 15.21.4.11-lp152.2.12.1Not reportedOPENSUSE-SU-2021:1404-1Not reported
Opensusedockerrpmleap 15.220.10.9_ce-lp152.2.18.1Not reportedOPENSUSE-SU-2021:1404-1Not reported
Opensuseruncrpmleap 15.21.0.2-lp152.2.9.1Not reportedOPENSUSE-SU-2021:1404-1Not reported
Susecontainerdrpmlinux enterprise module for containers 15 sp21.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmlinux enterprise module for containers 15 sp220.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise module for containers 15 sp21.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmlinux enterprise module for containers 15 sp31.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmlinux enterprise module for containers 15 sp320.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise module for containers 15 sp31.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15-espos1.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmlinux enterprise high performance computing 15-espos20.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise high performance computing 15-espos1.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15-ltss1.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmlinux enterprise high performance computing 15-ltss20.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise high performance computing 15-ltss1.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp1-espos1.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmlinux enterprise high performance computing 15 sp1-espos20.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise high performance computing 15 sp1-espos1.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp1-ltss1.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmlinux enterprise high performance computing 15 sp1-ltss20.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise high performance computing 15 sp1-ltss1.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmlinux enterprise server 15-ltss1.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmlinux enterprise server 15-ltss20.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise server 15-ltss1.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmlinux enterprise server 15 sp1-bcl1.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmlinux enterprise server 15 sp1-bcl20.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise server 15 sp1-bcl1.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmlinux enterprise server 15 sp1-ltss1.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmlinux enterprise server 15 sp1-ltss20.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise server 15 sp1-ltss1.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmlinux enterprise server for sap applications 151.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmlinux enterprise server for sap applications 1520.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise server for sap applications 151.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmlinux enterprise server for sap applications 15 sp11.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmlinux enterprise server for sap applications 15 sp120.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise server for sap applications 15 sp11.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmlinux enterprise micro 5.01.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmlinux enterprise micro 5.020.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise micro 5.01.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmlinux enterprise micro 5.11.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmlinux enterprise micro 5.120.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise micro 5.11.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmenterprise storage 61.4.11-56.1Not reportedSUSE-SU-2021:3506-1Not reported
Susedockerrpmenterprise storage 620.10.9_ce-156.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmenterprise storage 61.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmenterprise storage 71.0.2-23.1Not reportedSUSE-SU-2021:3506-1Not reported
Suseruncrpmlinux enterprise module for containers 121.0.0~rc93-16.11.1Not reportedSUSE-SU-2021:1885-1Not reported
Ubunturuncdebpro1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm2Not reportedUBUNTU-CVE-2021-30465Not reported
Ubunturuncdeb18.041.0.0~rc93-0ubuntu1~18.04.2Not reportedUBUNTU-CVE-2021-30465Not reported
Ubunturuncdeb20.041.0.0~rc93-0ubuntu1~20.04.2Not reportedUBUNTU-CVE-2021-30465Not reported
Opensusecontainerdrpmleap 15.31.4.11-56.1Not reportedOPENSUSE-SU-2021:3506-1Not reported
Opensusedockerrpmleap 15.320.10.9_ce-156.1Not reportedOPENSUSE-SU-2021:3506-1Not reported
Opensusedocker-kubicrpmleap 15.320.10.9_ce-156.1Not reportedOPENSUSE-SU-2021:3506-1Not reported
Opensuseruncrpmleap 15.31.0.2-23.1Not reportedOPENSUSE-SU-2021:3506-1Not reported
Susecontainerdrpmlinux enterprise module for containers 121.4.11-16.45.1Not reportedSUSE-SU-2021:3336-1Not reported
Susedockerrpmlinux enterprise module for containers 1220.10.9_ce-98.72.1Not reportedSUSE-SU-2021:3336-1Not reported
Suseruncrpmlinux enterprise module for containers 121.0.2-16.14.1Not reportedSUSE-SU-2021:3336-1Not reported

[Debian bug #988768]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • Source package: [runc]

    Details (4)
    • 1.1.5+ds1-1+deb12u1 · all · bookworm

      Fixed · Fixed: 1.0.0~rc93+ds1-5

      dsa · runc · debian · bookworm; dsa · runc · debian · 12

    • 1.1.5+ds1-1+deb12u1 · all · bookworm

      Fixed · Fixed: 1.0.0~rc93+ds1-5

      dsa · runc · debian · bookworm; dsa · runc · debian · 12

    • 1.1.5+ds1-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 1.0.0~rc93+ds1-5

      dsa · runc · debian · bookworm; dsa · runc · debian · 12

    • 1.1.5+ds1-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 1.0.0~rc93+ds1-5

      dsa · runc · debian · bookworm; dsa · runc · debian · 12

  • [runc]Unknown
    Details (4)
    • 1.1.5+ds1-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1.0.0~rc93+ds1-5

      dsa · runc · debian · bookworm; dsa · runc · debian · 12

    • 1.1.5+ds1-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1.0.0~rc93+ds1-5

      dsa · runc · debian · bookworm; dsa · runc · debian · 12

    • 1.1.5+ds1-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 1.0.0~rc93+ds1-5

      dsa · runc · debian · bookworm; dsa · runc · debian · 12

    • 1.1.5+ds1-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 1.0.0~rc93+ds1-5

      dsa · runc · debian · bookworm; dsa · runc · debian · 12

[Debian 13 (Trixie)]

  • Source package: [runc]

    Details (2)
    • 1.1.15+ds1-2 · all · trixie

      Fixed · Fixed: 1.0.0~rc93+ds1-5

      dsa · runc · debian · 13

    • 1.1.15+ds1-2 · all · trixie

      Fixed · Fixed: 1.0.0~rc93+ds1-5

      dsa · runc · debian · 13

  • [runc]Unknown

    Source package: [runc]

    Details (2)
    • 1.1.15+ds1-2+b4 · amd64 · trixie

      Fixed · Fixed: 1.0.0~rc93+ds1-5

      dsa · runc · debian · 13

    • 1.1.15+ds1-2+b4 · arm64 · trixie

      Fixed · Fixed: 1.0.0~rc93+ds1-5

      dsa · runc · debian · 13

Observed:

References