CVE-2020-1702: Containers-Image Project Containers-Image
Low severity, CVSS 3.3. EPSS: 0.7% chance of exploitation in the next 30 days.
A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.
Affected products
- Containers-Image Project Containers-Image: before 5.2.0 (fixed in 5.2.0)
- Red Hat Enterprise Linux: version 8.0 only
Published 2021-05-27. Last modified 2026-06-17.