Search for vulnerabilities
Vulnerability details: VCID-1qre-8m4c-8bar
Vulnerability ID VCID-1qre-8m4c-8bar
Aliases CVE-2021-30465
GHSA-c3xm-pvg7-gh7r
Summary sandbox escape
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-59 Improper Link Resolution Before File Access ('Link Following')
System Score Found at
cvssv3 7.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30465.json
epss 0.01473 https://api.first.org/data/v1/epss?cve=CVE-2021-30465
cvssv3.1 7.6 https://bugzilla.opensuse.org/show_bug.cgi?id=1185405
generic_textual HIGH https://bugzilla.opensuse.org/show_bug.cgi?id=1185405
cvssv3.1 8.4 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 7.6 https://github.com/opencontainers/runc/commit/0ca91f44f1664da834bc61115a849b56d22f595f
generic_textual HIGH https://github.com/opencontainers/runc/commit/0ca91f44f1664da834bc61115a849b56d22f595f
cvssv3.1 7.6 https://github.com/opencontainers/runc/releases
generic_textual HIGH https://github.com/opencontainers/runc/releases
cvssv3.1 7.6 https://github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r
generic_textual HIGH https://github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r
cvssv3.1 7.6 https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html
generic_textual HIGH https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html
cvssv3.1 7.6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/35ZW6NBZSBH5PWIT7JU4HXOXGFVDCOHH
generic_textual HIGH https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/35ZW6NBZSBH5PWIT7JU4HXOXGFVDCOHH
cvssv3.1 7.6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HOARVIT47RULTTFWAU7XBG4WY6TDDHV
generic_textual HIGH https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HOARVIT47RULTTFWAU7XBG4WY6TDDHV
cvssv3.1 7.6 https://nvd.nist.gov/vuln/detail/CVE-2021-30465
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2021-30465
archlinux High https://security.archlinux.org/AVG-1972
cvssv3.1 7.6 https://security.gentoo.org/glsa/202107-26
generic_textual HIGH https://security.gentoo.org/glsa/202107-26
cvssv3.1 7.6 https://security.netapp.com/advisory/ntap-20210708-0003
generic_textual HIGH https://security.netapp.com/advisory/ntap-20210708-0003
cvssv3.1 7.6 http://www.openwall.com/lists/oss-security/2021/05/19/2
generic_textual HIGH http://www.openwall.com/lists/oss-security/2021/05/19/2
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30465.json
https://api.first.org/data/v1/epss?cve=CVE-2021-30465
https://bugzilla.opensuse.org/show_bug.cgi?id=1185405
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30465
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/opencontainers/runc/commit/0ca91f44f1664da834bc61115a849b56d22f595f
https://github.com/opencontainers/runc/releases
https://github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r
https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/35ZW6NBZSBH5PWIT7JU4HXOXGFVDCOHH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HOARVIT47RULTTFWAU7XBG4WY6TDDHV
https://nvd.nist.gov/vuln/detail/CVE-2021-30465
https://security.gentoo.org/glsa/202107-26
https://security.netapp.com/advisory/ntap-20210708-0003
http://www.openwall.com/lists/oss-security/2021/05/19/2
1954736 https://bugzilla.redhat.com/show_bug.cgi?id=1954736
988768 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988768
ASA-202105-17 https://security.archlinux.org/ASA-202105-17
AVG-1972 https://security.archlinux.org/AVG-1972
RHSA-2021:1562 https://access.redhat.com/errata/RHSA-2021:1562
RHSA-2021:1566 https://access.redhat.com/errata/RHSA-2021:1566
RHSA-2021:2057 https://access.redhat.com/errata/RHSA-2021:2057
RHSA-2021:2144 https://access.redhat.com/errata/RHSA-2021:2144
RHSA-2021:2145 https://access.redhat.com/errata/RHSA-2021:2145
RHSA-2021:2150 https://access.redhat.com/errata/RHSA-2021:2150
RHSA-2021:2291 https://access.redhat.com/errata/RHSA-2021:2291
RHSA-2021:2292 https://access.redhat.com/errata/RHSA-2021:2292
RHSA-2021:2370 https://access.redhat.com/errata/RHSA-2021:2370
RHSA-2021:2371 https://access.redhat.com/errata/RHSA-2021:2371
USN-4960-1 https://usn.ubuntu.com/4960-1/
USN-USN-4867-1 https://usn.ubuntu.com/USN-4867-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30465.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Found at https://bugzilla.opensuse.org/show_bug.cgi?id=1185405
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Found at https://github.com/opencontainers/runc/commit/0ca91f44f1664da834bc61115a849b56d22f595f
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Found at https://github.com/opencontainers/runc/releases
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Found at https://github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Found at https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Found at https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/35ZW6NBZSBH5PWIT7JU4HXOXGFVDCOHH
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Found at https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HOARVIT47RULTTFWAU7XBG4WY6TDDHV
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2021-30465
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Found at https://security.gentoo.org/glsa/202107-26
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Found at https://security.netapp.com/advisory/ntap-20210708-0003
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Found at http://www.openwall.com/lists/oss-security/2021/05/19/2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.80016
EPSS Score 0.01473
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T11:53:39.082569+00:00 Arch Linux Importer Import https://security.archlinux.org/AVG-1972 36.1.3