CVE-2020-1702

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published
May 27, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-170203.3Microsoft Word Security Feature Bypass VulnerabilityCVE-2020-170215.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2020-170227.8<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who CVE-2020-170237.8<p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. ACVE-2020-170247.8Windows Client Side Rendering Print Provider Elevation of Privilege VulnerabilityCVE-2020-170257.8Windows Remote Access Elevation of Privilege VulnerabilityCVE-2020-170267.8Windows Remote Access Elevation of Privilege VulnerabilityCVE-2020-170277.8Windows Remote Access Elevation of Privilege VulnerabilityCVE-2020-170287.8Windows Remote Access Elevation of Privilege VulnerabilityCVE-2020-170295.5Windows Canonical Display Driver Information Disclosure VulnerabilityCVE-2020-170305.5Windows MSCTF Server Information Disclosure VulnerabilityCVE-2020-170317.8Windows Remote Access Elevation of Privilege Vulnerability