A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1702
Reference (s):
- https://bugzilla.redhat.com/show_bug.cgi?id=1792796
- URL: https://bugzilla.redhat.com/show_bug.cgi?id=1792796