A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade udicaUpgrade critUpgrade python3-criuUpgrade criuUpgrade python-podman-apiUpgrade toolboxUpgrade slirp4netns | May 13, 2022 | May 27, 2021 |
| Centos_linux | — | Upgrade criu-debugsourceUpgrade docker-logrotateUpgrade buildah-debuginfoUpgrade cockpit-podmanUpgrade docker-clientUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade python-podman-apiUpgrade runc-debugsourceUpgrade runcUpgrade buildahUpgrade fuse-overlayfsUpgrade skopeo-debuginfoUpgrade buildah-testsUpgrade podman-remoteUpgrade docker-debuginfoUpgrade python3-criuUpgrade skopeo-debugsourceUpgrade podman-debuginfoUpgrade podman-dockerUpgrade conmonUpgrade podman-remote-debuginfoUpgrade podman-testsUpgrade skopeoUpgrade dockerUpgrade critUpgrade docker-lvm-pluginUpgrade podmanUpgrade slirp4netns-debuginfoUpgrade docker-rhel-push-pluginUpgrade containernetworking-plugins-debugsourceUpgrade container-selinuxUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade udicaUpgrade podman-debugsourceUpgrade containers-commonUpgrade toolboxUpgrade docker-novolume-pluginUpgrade docker-commonUpgrade docker-v1.10-migratorUpgrade fuse-overlayfs-debuginfoUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade buildah-debugsource | Apr 2, 2020 | Mar 31, 2020 |
| Oracle_linux | — | Upgrade container-selinuxUpgrade buildahUpgrade podman-testsUpgrade buildah-testsUpgrade python3-criuUpgrade python-podman-apiUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade udicaUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade criuUpgrade podmanUpgrade critUpgrade skopeoUpgrade runcUpgrade containers-commonUpgrade conmonUpgrade podman-remoteUpgrade containernetworking-plugins | Jul 22, 2024 | Jan 20, 2020 |
| Redhat Openshift | — | Upgrade cri-o | Dec 29, 2020 | Jan 20, 2020 |
| Redhat_linux | — | Upgrade skopeo-debugsourceUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceNo solution existsUpgrade runc-debugsourceUpgrade buildah-testsUpgrade containers-commonUpgrade skopeoUpgrade criu-debugsourceUpgrade conmonUpgrade fuse-overlayfsUpgrade podmanUpgrade cockpit-podmanUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade criuUpgrade container-selinuxUpgrade python-podman-apiUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-dockerUpgrade podman-remoteUpgrade udicaUpgrade critUpgrade skopeo-testsUpgrade podman-testsUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-debugsourceUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade python3-criuUpgrade runcUpgrade containernetworking-pluginsUpgrade skopeo-debuginfoUpgrade podman-debuginfo | Apr 2, 2020 | Mar 31, 2020 |
| Rocky_linux | — | Upgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade criu-debugsourceUpgrade runcUpgrade criuUpgrade python3-criuUpgrade critUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade runc-debuginfoUpgrade slirp4netns | Mar 12, 2024 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub