The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2358:01 advisory.

    * runc: vulnerable to symlink exchange attack (CVE-2021-30465)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 3 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:2150 advisory.

  - runc: vulnerable to symlink exchange attack (CVE-2021-30465)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:1562 advisory.

  - runc: vulnerable to symlink exchange attack (CVE-2021-30465)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2021_2370 advisory.

    * runc: vulnerable to symlink exchange attack (CVE-2021-30465)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1566 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.6.30. See the following     advisory for the container images for this release:

    https://access.redhat.com/errata/RHBA-2021:1565

    The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides     container runtime.

    Security Fix(es):

    * runc: vulnerable to symlink exchange attack (CVE-2021-30465)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.6 users are advised to upgrade to these     updated packages and images when they are available in the appropriate release     channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for     upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-between-     minor.html#understanding-upgrade-channels_updating-cluster-between-minor

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2291 advisory.

    - fix CVE-2021-30465

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1954-1 advisory.

  - In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in     which access to remapped root allows privilege escalation to real root. When using --userns-remap, if     the root user in the remapped namespace has access to the host filesystem they can modify files under     /var/lib/docker/ that cause writing files with extended privileges. Versions 20.10.3 and     19.03.15 contain patches that prevent privilege escalation from remapped user. (CVE-2021-21284)

  - In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally     malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches     that prevent the daemon from crashing. (CVE-2021-21285)

  - In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers     launched through containerd's CRI implementation (through Kubernetes, crictl, or any other pod/container     client that uses the containerd CRI service) that share the same image may receive incorrect environment     variables, including values that are defined for other containers. If the affected containers have     different security contexts, this may allow sensitive information to be unintentionally shared. If you are     not using containerd's CRI implementation (through one of the mechanisms described above), you are not     vulnerable to this issue. If you are not launching multiple containers or Kubernetes pods from the same     image which have different environment variables, you are not vulnerable to this issue. If you are not     launching multiple containers or Kubernetes pods from the same image in rapid succession, you have reduced     likelihood of being vulnerable to this issue This vulnerability has been fixed in containerd 1.3.10 and     containerd 1.4.4. Users should update to these versions. (CVE-2021-21334)

  - runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the     vulnerability, an attacker must be able to create multiple containers with a fairly specific mount     configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
    (CVE-2021-30465)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202107-26 (runC: Container breakout)

    A vulnerability in runC could allow an attacker to achieve privilege       escalation if specific mount configuration prerequisites are satisfied.
  Impact :

    An attacker may be able to escalation privileges to gain access to the       host system.
  Workaround :

    There is no known workaround at this time.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has docker-ce packages installed that are affected by multiple vulnerabilities:

  - runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor     restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a     malicious Docker image can mount over a /proc directory. (CVE-2019-16884)

  - In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in     which access to remapped root allows privilege escalation to real root. When using --userns-remap, if     the root user in the remapped namespace has access to the host filesystem they can modify files under     /var/lib/docker/<remapping> that cause writing files with extended privileges. Versions 20.10.3 and     19.03.15 contain patches that prevent privilege escalation from remapped user. (CVE-2021-21284)

  - runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the     vulnerability, an attacker must be able to create multiple containers with a fairly specific mount     configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
    (CVE-2021-30465)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2144 advisory.

  - runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the     vulnerability, an attacker must be able to create multiple containers with a fairly specific mount     configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
    (CVE-2021-30465)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1764:03 advisory.

    * runc: vulnerable to symlink exchange attack (CVE-2021-30465)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2355:01 advisory.

    * runc: vulnerable to symlink exchange attack (CVE-2021-30465)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
294612	MiracleLinux 8 : container-tools:3.0 (AXSA:2021-2358:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
312513	RHCOS 3 : OpenShift Container Platform 3.11.452 (RHSA-2021:2150)	Nessus	Red Hat Local Security Checks	2026/5/6	2026/5/6	high
312514	RHCOS 4 : OpenShift Container Platform 4.7.12 (RHSA-2021:1562)	Nessus	Red Hat Local Security Checks	2026/5/6	2026/5/6	high
359119	Rocky Linux 8 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc (crlsa-2021_2370)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
149978	RHEL 7 / 8 : OpenShift Container Platform 4.6.30 (RHSA-2021:1566)	Nessus	Red Hat Local Security Checks	2021/5/26	2024/11/7	high
150500	Oracle Linux 8 : container-tools:2.0 (ELSA-2021-2291)	Nessus	Oracle Linux Local Security Checks	2021/6/10	2024/11/1	high
151692	openSUSE 15 Security Update : containerd, docker, runc (openSUSE-SU-2021:1954-1)	Nessus	SuSE Local Security Checks	2021/7/16	2021/7/16	high
157024	GLSA-202107-26 : runC: Container breakout	Nessus	Gentoo Local Security Checks	2022/1/24	2023/12/21	high
160855	NewStart CGSL CORE 5.05 / MAIN 5.05 : docker-ce Multiple Vulnerabilities (NS-SA-2022-0033)	Nessus	NewStart CGSL Local Security Checks	2022/5/10	2023/10/30	high
208514	CentOS 7 : docker (RHSA-2021:2144)	Nessus	CentOS Local Security Checks	2024/10/9	2024/10/9	high
293810	MiracleLinux 7 : docker-1.13.1-206.git7d71120.0.1.el7.AXS7 (AXSA:2021-1764:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
294090	MiracleLinux 8 : container-tools:2.0 (AXSA:2021-2355:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high