Skip to content
Fencer Vulns
low 3.3

CVE-2020-1702 json

A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterp…

published 2021-05-27 5 y ago modified 2026-06-17 4 mo ago also EUVD-2020-12557

cvss
3.3
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.7%
EPSS 0.7% chance of exploitation in 30 days, percentile 52%
public exploits
0
none known

Summary

A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.

Patch / fix

  • containers-image_project containers-image 5.2.0
  • buildah RHEL 7 EXTRAS_OTHER 1.11.6-11.el7_8
  • crit RHEL 8 3.12-9.module+el8.2.0+5029+3ac48e7d
  • criu RHEL 8 3.12-9.module+el8.2.0+5029+3ac48e7d
  • runc RHEL 8 1.0.0-65.rc10.module+el8.2.0+5762+aaee29fb
  • udica RHEL 8 0.2.1-2.module+el8.2.0+4896+8f613c81
  • conmon RHEL 8 2:2.0.6-1.module+el8.2.0+5182+3136e5d4
  • podman RHEL 8 1.6.4-10.module+el8.2.0+6063+e761893a
  • skopeo RHEL 8 1:0.1.40-10.module+el8.2.0+5955+6cd70ceb

red hat advisories RHSA-2020:2116RHSA-2020:1650RHSA-2020:1937RHSA-2020:1234RHSA-2020:2681RHSA-2020:2218

  • crit AlmaLinux 8 3.12-9.module_el8.3.0+2044+12421f43
  • crit AlmaLinux 8 3.12-9.module_el8.4.0+2496+12421f43
  • crit AlmaLinux 8 3.12-9.module_el8.5.0+119+9a9ec082
  • criu AlmaLinux 8 3.12-9.module_el8.4.0+2496+12421f43
  • criu AlmaLinux 8 3.12-9.module_el8.3.0+2044+12421f43
  • criu AlmaLinux 8 3.12-9.module_el8.5.0+119+9a9ec082
  • udica AlmaLinux 8 0.2.1-2.module_el8.5.0+108+00865455
  • udica AlmaLinux 8 0.2.1-2.module_el8.5.0+2635+e4386a39

almalinux advisories ALSA-2020:1650

  • criu Rocky Linux 8 3.12-9.module+el8.5.0+681+c9a1951f
  • criu Rocky Linux 8 3.12-9.module+el8.4.0+557+48ba8b2f
  • runc Rocky Linux 8 1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2
  • udica Rocky Linux 8 0.2.1-2.module+el8.5.0+770+e2f49861
  • udica Rocky Linux 8 0.2.1-2.module+el8.4.0+559+c02fa3b2
  • udica Rocky Linux 8 0.2.1-2.module+el8.5.0+708+6758137d
  • toolbox Rocky Linux 8 0.0.7-1.module+el8.5.0+770+e2f49861
  • toolbox Rocky Linux 8 0.0.7-1.module+el8.4.0+559+c02fa3b2

rocky linux advisories RLSA-2020:1650

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2020-1702 updated cvss 3.5

containers/image: Container images read entire image manifest into memory

  • Red Hat Enterprise Linux 8 podman, skopeo, buildah, podman-tests, skopeo-tests, buildah-tests, +7 more
    affected: no fix available “Fix deferred”
  • Red Hat Enterprise Linux 7 Extras podman 1.6.4-16.el7_8, skopeo 0.1.40-11.el7_8, buildah 1.11.6-11.el7_8, podman-docker 1.6.4-16.el7_8, containers-common 0.1.40-11.el7_8, docker 1.13.1-161.git64e9980.el7_8, +7 more
    fixed: vendor fix RHSA-2020:2116
  • Red Hat Enterprise Linux AppStream (v. 8) crit 3.12-9.module+el8.2.0+5029+3ac48e7d, criu 3.12-9.module+el8.2.0+5029+3ac48e7d, udica 0.2.1-2.module+el8.2.0+4896+8f613c81, conmon 2.0.6-1.module+el8.2.0+5182+3136e5d4, podman 1.6.4-10.module+el8.2.0+6063+e761893a, toolbox 0.0.7-1.module+el8.2.0+6096+9c3f08f3, +16 more
    fixed: vendor fix RHSA-2020:1650
  • Red Hat OpenShift Container Platform 3.11 cri-o 1.11.16-0.9.dev.rhaos3.11.git6d43aae.el7
    fixed: vendor fix RHSA-2020:2218
  • Red Hat OpenShift Container Platform 4.3 openshift4/ose-cli v4.3.2-202002112006, openshift4/ose-pod v4.3.2-202002112006, openshift4/ose-ptp v4.3.2-202002070552, openshift4/apb-base v4.3.2-202002070552, openshift4/ose-etcd v4.3.2-202002112006, openshift4/apb-tools v4.3.2-202002070552, +124 more
    fixed: vendor fix RHBA-2020:0492
  • Red Hat OpenShift Container Platform 4.4 cri-o 1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7, cri-o 1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8
    fixed: vendor fix RHSA-2020:1937

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.69% chance of exploitation in the next 30 days, higher than 52% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

  • n/a containers/image

Classification

Weakness
  • CWE-400 Uncontrolled Resource Consumption

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.