CVE-2020-1702
27.05.2021, 20:15
A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.Enginsight
Vendor | Product | Version |
---|---|---|
containers-image_project | containers-image | 𝑥 < 5.2.0 |
redhat | enterprise_linux | 8.0 |
𝑥
= Vulnerable software versions