{"id":"CVE-2020-1702","aliases":["ALSA-2020:1650","EUVD-2020-12557","GHSA-f6vj-xx8j-fqmq","RHSA-2020:1227","RHSA-2020:1234","RHSA-2020:1650","RHSA-2020:1937","RHSA-2020:2116","RHSA-2020:2218","RHSA-2020:2681","RLSA-2020:1650"],"status":"published","title":"A malicious container image can consume an unbounded amount of memory when being pulled to a...","description":"A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00688,"percentile":0.53056,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2020-04-28T09:01:00Z","modified":"2026-10-31T08:30:02Z","fixes":[{"ecosystem":"Red Hat:openshift:3.11::el7","package":"cri-o","fixed_in":["0:1.11.16-0.9.dev.rhaos3.11.git6d43aae.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"cri-o-debuginfo","fixed_in":["0:1.11.16-0.9.dev.rhaos3.11.git6d43aae.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"containers-common","fixed_in":["1:0.1.40-11.el7_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"skopeo","fixed_in":["1:0.1.40-11.el7_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"skopeo-debuginfo","fixed_in":["1:0.1.40-11.el7_8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.3.0+2044+12421f43"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.4.0+2496+12421f43"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.5.0+119+9a9ec082"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.4.0+2496+12421f43"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.3.0+2044+12421f43"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.5.0+119+9a9ec082"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.3.0+2044+12421f43"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.4.0+2496+12421f43"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.5.0+119+9a9ec082"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2-3.git21fdece.module_el8.5.0+2635+e4386a39"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2-3.git21fdece.module_el8.5.0+108+00865455"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.7-1.module_el8.5.0+108+00865455"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.7-1.module_el8.5.0+2635+e4386a39"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.1-2.module_el8.5.0+108+00865455"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.1-2.module_el8.5.0+2635+e4386a39"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-16.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-16.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-16.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-161.git64e9980.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-161.git64e9980.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-161.git64e9980.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-161.git64e9980.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-161.git64e9980.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-lvm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-161.git64e9980.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-novolume-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-161.git64e9980.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-rhel-push-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-161.git64e9980.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-v1.10-migrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-161.git64e9980.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-7.module+el8.2.0+5856+b8046c6d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-7.module+el8.2.0+5856+b8046c6d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-7.module+el8.2.0+5856+b8046c6d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-7.module+el8.2.0+5856+b8046c6d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-7.module+el8.2.0+5856+b8046c6d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12-1.module+el8.2.0+5950+6d183a6a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.6-1.module+el8.2.0+5182+3136e5d4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.124.0-1.module+el8.2.0+5182+3136e5d4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.3-5.module+el8.2.0+5201+6b31f0d9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.3-5.module+el8.2.0+5201+6b31f0d9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.3-5.module+el8.2.0+5201+6b31f0d9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.40-10.module+el8.2.0+5955+6cd70ceb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-9.module+el8.2.0+5029+3ac48e7d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-9.module+el8.2.0+5029+3ac48e7d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-9.module+el8.2.0+5029+3ac48e7d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-9.module+el8.2.0+5029+3ac48e7d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.2-5.module+el8.2.0+6060+9dbc027d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.2-5.module+el8.2.0+6060+9dbc027d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.2-5.module+el8.2.0+6060+9dbc027d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-10.module+el8.2.0+6063+e761893a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-10.module+el8.2.0+6063+e761893a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-10.module+el8.2.0+6063+e761893a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-10.module+el8.2.0+6063+e761893a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-10.module+el8.2.0+6063+e761893a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-10.module+el8.2.0+6063+e761893a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-10.module+el8.2.0+6063+e761893a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-0.2.gitd0a45fe.module+el8.2.0+5201+6b31f0d9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-9.module+el8.2.0+5029+3ac48e7d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-65.rc10.module+el8.2.0+5762+aaee29fb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-65.rc10.module+el8.2.0+5762+aaee29fb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-65.rc10.module+el8.2.0+5762+aaee29fb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.40-10.module+el8.2.0+5955+6cd70ceb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.40-10.module+el8.2.0+5955+6cd70ceb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.40-10.module+el8.2.0+5955+6cd70ceb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.40-10.module+el8.2.0+5955+6cd70ceb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-3.git21fdece.module+el8.2.0+5658+9a15711d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-3.git21fdece.module+el8.2.0+5658+9a15711d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-3.git21fdece.module+el8.2.0+5658+9a15711d"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.7-1.module+el8.2.0+6096+9c3f08f3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-2.module+el8.2.0+4896+8f613c81"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-11.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-11.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.16-0.9.dev.rhaos3.11.git6d43aae.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.16-0.9.dev.rhaos3.11.git6d43aae.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.40-11.el7_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.40-11.el7_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.40-11.el7_8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-9.module+el8.5.0+681+c9a1951f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-9.module+el8.4.0+557+48ba8b2f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.7-1.module+el8.5.0+770+e2f49861"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.7-1.module+el8.4.0+559+c02fa3b2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.7-1.module+el8.5.0+708+6758137d"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-2.module+el8.5.0+770+e2f49861"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-2.module+el8.4.0+559+c02fa3b2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-2.module+el8.5.0+708+6758137d"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f"}]}],"bundled":3}],"products":[{"vendor":"containers-image_project","product":"containers-image"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1792796","tags":["x_refsource_MISC","x_transferred","Issue Tracking","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1702","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-f6vj-xx8j-fqmq"},{"url":"https://access.redhat.com/errata/RHSA-2020:1650","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1703245","tags":["report"]},{"url":"https://bugzilla.redhat.com/1717357","tags":["report"]},{"url":"https://bugzilla.redhat.com/1731107","tags":["report"]},{"url":"https://bugzilla.redhat.com/1732704","tags":["report"]},{"url":"https://bugzilla.redhat.com/1732713","tags":["report"]},{"url":"https://bugzilla.redhat.com/1748519","tags":["report"]},{"url":"https://bugzilla.redhat.com/1749999","tags":["report"]},{"url":"https://bugzilla.redhat.com/1754744","tags":["report"]},{"url":"https://bugzilla.redhat.com/1754763","tags":["report"]},{"url":"https://bugzilla.redhat.com/1755119","tags":["report"]},{"url":"https://bugzilla.redhat.com/1756919","tags":["report"]},{"url":"https://bugzilla.redhat.com/1757693","tags":["report"]},{"url":"https://bugzilla.redhat.com/1757845","tags":["report"]},{"url":"https://bugzilla.redhat.com/1763454","tags":["report"]},{"url":"https://bugzilla.redhat.com/1766774","tags":["report"]},{"url":"https://bugzilla.redhat.com/1768930","tags":["report"]},{"url":"https://bugzilla.redhat.com/1769469","tags":["report"]},{"url":"https://bugzilla.redhat.com/1771990","tags":["report"]},{"url":"https://bugzilla.redhat.com/1774755","tags":["report"]},{"url":"https://bugzilla.redhat.com/1775307","tags":["report"]},{"url":"https://bugzilla.redhat.com/1776112","tags":["report"]},{"url":"https://bugzilla.redhat.com/1779834","tags":["report"]},{"url":"https://bugzilla.redhat.com/1783267","tags":["report"]},{"url":"https://bugzilla.redhat.com/1783268","tags":["report"]},{"url":"https://bugzilla.redhat.com/1783270","tags":["report"]},{"url":"https://bugzilla.redhat.com/1783272","tags":["report"]},{"url":"https://bugzilla.redhat.com/1783274","tags":["report"]},{"url":"https://bugzilla.redhat.com/1784267","tags":["report"]},{"url":"https://bugzilla.redhat.com/1784952","tags":["report"]},{"url":"https://bugzilla.redhat.com/1788539","tags":["report"]},{"url":"https://bugzilla.redhat.com/1792796","tags":["report"]},{"url":"https://bugzilla.redhat.com/1793084","tags":["report"]},{"url":"https://bugzilla.redhat.com/1793598","tags":["report"]},{"url":"https://bugzilla.redhat.com/1796107","tags":["report"]},{"url":"https://bugzilla.redhat.com/1801152","tags":["report"]},{"url":"https://bugzilla.redhat.com/1802907","tags":["report"]},{"url":"https://bugzilla.redhat.com/1803496","tags":["report"]},{"url":"https://bugzilla.redhat.com/1804849","tags":["report"]},{"url":"https://bugzilla.redhat.com/1805017","tags":["report"]},{"url":"https://bugzilla.redhat.com/1805212","tags":["report"]},{"url":"https://bugzilla.redhat.com/1806901","tags":["report"]},{"url":"https://bugzilla.redhat.com/1808707","tags":["report"]},{"url":"https://bugzilla.redhat.com/1810053","tags":["report"]},{"url":"https://bugzilla.redhat.com/1811514","tags":["report"]},{"url":"https://bugzilla.redhat.com/1813295","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-1650.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-19921","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-1702","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-1726","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1227","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1650395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788549","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1797599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1806895","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807437","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808702","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1227.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-18466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18466","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-1702","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-1702","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1234","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1784228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1795376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1795838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1796451","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1234.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16884","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8945","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8945","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8945","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1717357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1731107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1748519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1754744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1754763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1755119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1756919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1763454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1766774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1768930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1769469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1771990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1774755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1775307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1776112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1779834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1783267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1783268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1783270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1783272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1783274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1784267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1784952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788539","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1796107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1803496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1805017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1805212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1806901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1810053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1811514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813295","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1650.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19921","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19921","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-1726","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-1726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1726","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1937","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1937.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2116","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1817651","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1822031","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2116.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10696","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10696","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10696","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2218","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2218.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2681","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1810052","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2681.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:1650","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-1702","description":"A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.","status":"published","published":"2021-05-27T19:45:08Z","modified":"2024-08-04T06:46:30.897Z","cwes":["CWE-400"],"updated_at":"2026-11-02T14:35:56.638833Z"}],"euvd":[{"id":"EUVD-2020-12557","description":"A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.","status":"published","published":"2021-05-27T19:45:08Z","modified":"2024-08-04T06:46:30Z","updated_at":"2026-11-03T03:08:12.086746Z"}],"ghsa":[{"id":"GHSA-f6vj-xx8j-fqmq","title":"A malicious container image can consume an unbounded amount of memory when being pulled to a...","description":"A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.","status":"published","published":"2022-05-24T19:03:34Z","modified":"2023-01-29T05:07:47Z","cwes":["CWE-400"],"updated_at":"2026-11-02T14:46:11.123221Z"}],"nvd":[{"id":"CVE-2020-1702","description":"A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.","status":"published","published":"2021-05-27T20:15:07.993Z","modified":"2026-06-17T03:02:14.5Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:06:43.288951Z"}],"osv":[{"id":"CVE-2020-1702","description":"A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.","status":"published","published":"2021-05-27T20:15:07.993Z","modified":"2026-10-24T10:30:30.179836268Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:14.828228Z"},{"id":"RHSA-2020:1227","title":"Red Hat Security Advisory: podman security, bug fix, and enhancement update","status":"published","published":"2024-09-13T18:08:17Z","modified":"2026-06-27T10:09:31Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1234","title":"Red Hat Security Advisory: docker security and bug fix update","status":"published","published":"2024-09-13T22:39:19Z","modified":"2026-06-27T10:09:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1650","title":"Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T03:17:28Z","modified":"2026-06-27T10:09:55Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:1937","title":"Red Hat Security Advisory: OpenShift Container Platform 4.4.3 cri-o security update","status":"published","published":"2024-09-13T22:40:05Z","modified":"2026-06-27T10:10:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2116","title":"Red Hat Security Advisory: buildah security and bug fix update","status":"published","published":"2024-09-16T03:53:14Z","modified":"2026-08-08T10:01:46Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2218","title":"Red Hat Security Advisory: OpenShift Container Platform 3.11 security update","status":"published","published":"2024-09-13T18:10:04Z","modified":"2026-06-27T10:10:07Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2681","title":"Red Hat Security Advisory: skopeo security and bug fix update","status":"published","published":"2024-09-13T18:10:27Z","modified":"2026-06-27T10:10:30Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RLSA-2020:1650","title":"Moderate: container-tools:rhel8 security, bug fix, and enhancement update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation (CVE-2019-19921)\n\n* containers/image: Container images read entire image manifest into memory (CVE-2020-1702)\n\n* podman: incorrectly allows existing files in volumes to be overwritten by a container when it is created (CVE-2020-1726)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","status":"published","published":"2020-04-28T09:01:00Z","modified":"2026-02-05T06:45:12.461277Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"ALSA-2020:1650","title":"Moderate: container-tools:rhel8 security, bug fix, and enhancement update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation (CVE-2019-19921)\n\n* containers/image: Container images read entire image manifest into memory (CVE-2020-1702)\n\n* podman: incorrectly allows existing files in volumes to be overwritten by a container when it is created (CVE-2020-1726)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-04-28T09:01:00Z","modified":"2026-10-31T08:30:02.607442098Z","updated_at":"2026-11-02T15:27:51.196609Z"}]}}