CVE-2020-1750

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-07 · updated 2026-06-17
Weakness: CWE-400

Description

A flaw was found in the machine-config-operator that causes an OpenShift node to become unresponsive when a container consumes a large amount of memory. An attacker could use this flaw to deny access to schedule new pods in the OpenShift cluster. This was fixed in openshift/machine-config-operator 4.4.3, openshift/machine-config-operator 4.3.25, openshift/machine-config-operator 4.2.36.

Affected products

machine-config-operator-container: from 4.2.0 before 4.2.36; from 4.3.0 before 4.3.25; from 4.4.0 before 4.4.3 — fixed in 4.2.36, 4.3.25, 4.4.3

How to fix

Upgrade to a fixed version: machine-config-operator-container 4.2.36, 4.3.25, 4.4.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-1750 or the next vulnerability affects your stack