writeups.xyz / runc mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs (CVE-2021-30465)

Submitter : c2a

Date: 30 May 2021

Bounty : undisclosed

Vulnerabilities :

• Kubernetes
• Container Escape

Programs :

• Google

Authors :

• Etienne Champetier / Champtar

Link :
https://github.com/champtar/blog/tree/main/runc-symlink-CVE-2021-30465