Published: 27/05/2021 Updated: 10/06/2021

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 3.3 | Impact Score: 1.4 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions prior to 5.2.0.

Vulnerable Product	Search on Vulmon	Subscribe to Product
containers-image project containers-image
redhat enterprise linux 8.0

Synopsis Low: OpenShift Container Platform 311 security update Type/Severity Security Advisory: Low Topic Red Hat OpenShift Container Platform release 311219 is now available withupdates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as ha ...

Synopsis Important: buildah security and bug fix update Type/Severity Security Advisory: Important Topic An update for buildah is now available for Red Hat Enterprise Linux 7 ExtrasRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System ...

Synopsis Moderate: podman security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for podman is now available for Red Hat Enterprise Linux 7 ExtrasRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scori ...

Synopsis Moderate: container-tools:rhel8 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Mode ...

Synopsis Low: skopeo security and bug fix update Type/Severity Security Advisory: Low Topic An update for skopeo is now available for Red Hat Enterprise Linux 7 ExtrasRed Hat Product Security has rated this update as having a security impact of Low A Common Vulnerability Scoring System (CVSS) base score, ...

Synopsis Moderate: docker security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for docker is now available for Red Hat Enterprise Linux 7 ExtrasRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVS ...

CWE-400 https://bugzilla.redhat.com/show_bug.cgi?id=1792796 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2020:2218

CVE-2020-1702

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect