CVE-2020-1702

    Dashboard / Vulnerabilities / CVE-2020-1702

    CVE-2020-1702

    Published: 27 May 2021Last Modified: 8 Jul 2026

    Summary:

    Details: A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.

    References: https://bugzilla.redhat.com/show_bug.cgi?id=1792796

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -c81b201fe138f8671a621c4f2f6d57c3d3bcdb4f

    Affected versions

    v1.5.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2020-1702 | CVE-DB