https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:24:23 +0000 https://vulnerability.circl.lu/vuln/cve-2021-30465 <p>runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.</p> <p>runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.</p> https://vulnerability.circl.lu/vuln/cve-2021-30465 https://vulnerability.circl.lu/vuln/usn-4867-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: runc</p> <p>It was discovered that runC incorrectly checked mount targets. An attacker with a malicious container image could possibly mount over the /proc directory and escalate privileges. (CVE-2019-16884)</p> <p>Etienne Champetier discovered that runC incorrectly checked mount targets. An attacker with a malicious container image could possibly mount the host filesystem into the container and escalate privileges. (CVE-2021-30465)</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: runc</p> <p>It was discovered that runC incorrectly checked mount targets. An attacker with a malicious container image could possibly mount over the /proc directory and escalate privileges. (CVE-2019-16884)</p> <p>Etienne Champetier discovered that runC incorrectly checked mount targets. An attacker with a malicious container image could possibly mount the host filesystem into the container and escalate privileges. (CVE-2021-30465)</p> https://vulnerability.circl.lu/vuln/usn-4867-1