CVE-2020-1702CWE-400

A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using…

published May 27, 2021

CVSS
—
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00688 · 52.2th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-05-27T19:45Z
EPSS history
Timeline
  • 27 MAY 19:45Z
    A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using…
    cvelistv5