CVE-2020-1702

Name of the Vulnerable Software and Affected Versions containers-image versions prior to 5.2.0

Description A malicious container image can cause uncontrolled memory consumption when being pulled to a container runtime host. This can lead to a denial-of-service condition, where an attacker tricks a user with privileges to pull container images into crashing the process responsible for pulling the image. The issue affects Red Hat Enterprise Linux using podman and OpenShift Container Platform.

Recommendations For containers-image versions prior to 5.2.0, update to version 5.2.0 or later to resolve the issue. As a temporary workaround, consider restricting the ability to pull container images to minimize the risk of exploitation.