A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade slirp4netnsUpgrade python-podman-apiUpgrade toolboxUpgrade udicaUpgrade critUpgrade criuUpgrade python3-criu | May 13, 2022 | May 27, 2021 |
| Centos_linux | — | Upgrade python3-criuUpgrade buildah-debuginfoUpgrade cockpit-podmanUpgrade criu-debuginfoUpgrade runcUpgrade slirp4netnsUpgrade buildahUpgrade buildah-testsUpgrade skopeo-debuginfoUpgrade docker-debuginfoUpgrade runc-debugsourceUpgrade python-podman-apiUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade podman-debuginfoUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade criu-debugsourceUpgrade docker-clientUpgrade criuUpgrade docker-logrotateUpgrade fuse-overlayfs-debugsourceUpgrade udicaUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade docker-rhel-push-pluginUpgrade docker-novolume-pluginUpgrade docker-lvm-pluginUpgrade critUpgrade podman-debugsourceUpgrade containers-commonUpgrade toolboxUpgrade dockerUpgrade skopeoUpgrade docker-commonUpgrade docker-v1.10-migratorUpgrade skopeo-testsUpgrade fuse-overlayfs-debuginfoUpgrade container-selinuxUpgrade conmonUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade podman-tests | Apr 2, 2020 | Mar 31, 2020 |
| Oracle_linux | — | Upgrade container-selinuxUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade slirp4netnsUpgrade udicaUpgrade python3-criuUpgrade python-podman-apiUpgrade buildahUpgrade podman-testsUpgrade critUpgrade podman-remoteUpgrade skopeoUpgrade conmonUpgrade runcUpgrade criuUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade podman | Jul 22, 2024 | Jan 20, 2020 |
| Redhat Openshift | — | Upgrade cri-o | Dec 29, 2020 | Jan 20, 2020 |
| Redhat_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeoUpgrade criuUpgrade containernetworking-plugins-debugsourceUpgrade cockpit-podmanUpgrade buildahUpgrade containers-commonUpgrade podmanUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade toolboxUpgrade slirp4netnsUpgrade buildah-testsUpgrade conmonUpgrade runc-debugsourceUpgrade fuse-overlayfsUpgrade skopeo-debugsourceNo solution existsUpgrade skopeo-debuginfoUpgrade critUpgrade podman-testsUpgrade skopeo-testsUpgrade udicaUpgrade podman-remoteUpgrade python-podman-apiUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade slirp4netns-debugsourceUpgrade podman-dockerUpgrade podman-debugsourceUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade python3-criuUpgrade buildah-debugsource | Apr 2, 2020 | Mar 31, 2020 |
| Rocky_linux | — | Upgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade python3-criuUpgrade runcUpgrade criuUpgrade criu-debugsourceUpgrade slirp4netns-debugsourceUpgrade critUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade criu-debuginfo | Mar 12, 2024 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub