A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade python3-criuUpgrade udicaUpgrade criuUpgrade python-podman-apiUpgrade toolboxUpgrade slirp4netns | May 13, 2022 | May 27, 2021 |
| Centos_linux | — | Upgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade python3-criuUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debuginfoUpgrade docker-debuginfoUpgrade podman-dockerUpgrade criu-debuginfoUpgrade podman-remoteUpgrade cockpit-podmanUpgrade buildahUpgrade python-podman-apiUpgrade buildah-testsUpgrade criu-debugsourceUpgrade runcUpgrade criuUpgrade skopeo-debugsourceUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade docker-clientUpgrade docker-logrotateUpgrade containers-commonUpgrade udicaUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade critUpgrade buildah-debugsourceUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade conmonUpgrade podman-testsUpgrade docker-commonUpgrade docker-v1.10-migratorUpgrade skopeo-testsUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade container-selinuxUpgrade dockerUpgrade docker-lvm-pluginUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade docker-rhel-push-pluginUpgrade docker-novolume-pluginUpgrade podmanUpgrade toolbox | Apr 2, 2020 | Mar 31, 2020 |
| Oracle_linux | — | Upgrade container-selinuxUpgrade slirp4netnsUpgrade podman-dockerUpgrade python-podman-apiUpgrade buildah-testsUpgrade python3-criuUpgrade buildahUpgrade podman-testsUpgrade cockpit-podmanUpgrade udicaUpgrade fuse-overlayfsUpgrade podmanUpgrade skopeo-testsUpgrade skopeoUpgrade containernetworking-pluginsUpgrade criuUpgrade podman-remoteUpgrade critUpgrade conmonUpgrade runcUpgrade containers-common | Jul 22, 2024 | Jan 20, 2020 |
| Redhat Openshift | — | Upgrade cri-o | Dec 29, 2020 | Jan 20, 2020 |
| Redhat_linux | — | Upgrade skopeo-debuginfoUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade runcUpgrade udicaUpgrade python-podman-apiUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade critUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade podman-debuginfoUpgrade runc-debuginfoUpgrade podman-testsUpgrade podman-remoteUpgrade buildah-debugsourceUpgrade python3-criuUpgrade podman-dockerUpgrade podman-debugsourceUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-debuginfoUpgrade podmanUpgrade buildah-testsUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade buildahUpgrade criuUpgrade buildah-debuginfoUpgrade conmonUpgrade containers-commonUpgrade cockpit-podmanUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade skopeoUpgrade skopeo-debugsourceNo solution exists | Apr 2, 2020 | Mar 31, 2020 |
| Rocky_linux | — | Upgrade criuUpgrade criu-debugsourceUpgrade slirp4netns-debugsourceUpgrade python3-criuUpgrade runcUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade critUpgrade runc-debuginfoUpgrade criu-debuginfoUpgrade slirp4netns | Mar 12, 2024 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub