A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade udicaUpgrade criuUpgrade critUpgrade python3-criuUpgrade python-podman-apiUpgrade toolboxUpgrade slirp4netns | May 13, 2022 | May 27, 2021 |
| Centos_linux | — | Upgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade udicaUpgrade docker-lvm-pluginUpgrade critUpgrade runc-debuginfoUpgrade podman-testsUpgrade podman-remote-debuginfoUpgrade conmonUpgrade container-selinuxUpgrade buildah-debugsourceUpgrade dockerUpgrade skopeoUpgrade skopeo-testsUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade docker-rhel-push-pluginUpgrade docker-novolume-pluginUpgrade podmanUpgrade docker-v1.10-migratorUpgrade docker-commonUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debuginfoUpgrade containers-commonUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade buildah-debuginfoUpgrade docker-logrotateUpgrade buildah-tests-debuginfoUpgrade podman-debuginfoUpgrade podman-dockerUpgrade python3-criuUpgrade criuUpgrade skopeo-debuginfoUpgrade python-podman-apiUpgrade skopeo-debugsourceUpgrade docker-debuginfoUpgrade runc-debugsourceUpgrade fuse-overlayfsUpgrade docker-clientUpgrade cockpit-podmanUpgrade criu-debugsourceUpgrade runcUpgrade slirp4netnsUpgrade buildah-testsUpgrade buildahUpgrade criu-debuginfo | Apr 2, 2020 | Mar 31, 2020 |
| Oracle_linux | — | Upgrade buildah-testsUpgrade container-selinuxUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade slirp4netnsUpgrade udicaUpgrade buildahUpgrade python-podman-apiUpgrade python3-criuUpgrade podman-testsUpgrade critUpgrade skopeo-testsUpgrade podmanUpgrade podman-remoteUpgrade skopeoUpgrade criuUpgrade containernetworking-pluginsUpgrade runcUpgrade conmonUpgrade containers-common | Jul 22, 2024 | Jan 20, 2020 |
| Redhat Openshift | — | Upgrade cri-o | Dec 29, 2020 | Jan 20, 2020 |
| Redhat_linux | — | Upgrade cockpit-podmanUpgrade criuUpgrade skopeo-debugsourceUpgrade podman-remoteUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade udicaUpgrade slirp4netns-debugsourceUpgrade critUpgrade skopeo-testsUpgrade podman-testsUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade python-podman-apiUpgrade podman-dockerUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade skopeo-debuginfoUpgrade runcUpgrade buildah-debugsourceUpgrade python3-criuUpgrade podman-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade toolboxNo solution existsUpgrade buildah-debuginfoUpgrade containers-commonUpgrade fuse-overlayfsUpgrade skopeoUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade criu-debuginfoUpgrade buildahUpgrade slirp4netnsUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade buildah-testsUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade buildah-tests-debuginfo | Apr 2, 2020 | Mar 31, 2020 |
| Rocky_linux | — | Upgrade criu-debugsourceUpgrade runc-debugsourceUpgrade critUpgrade criuUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade runcUpgrade python3-criuUpgrade criu-debuginfoUpgrade runc-debuginfoUpgrade slirp4netns | Mar 12, 2024 | May 27, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub