Memory Consumption Vulnerability in Red Hat Container Image Pulling

CVE-2020-1702

What is CVE-2020-1702?

A security vulnerability allows a malicious container image to exploit unbounded memory consumption when pulled to a container runtime host, such as Red Hat's podman or OpenShift. This could lead to the crashing of the image-pulling process for users with the necessary privileges, creating potential disruptions in service and operational inefficiencies. The issue affects all versions of containers-image prior to 5.2.0, making users vulnerable to attacks that could lead to denial-of-service scenarios.

References