Vulnerability · Published Jun 6, 2023 · Assigned by redhat
CVE-2023-2253
Medium 6.5
In plain English
A medium-severity security flaw in distribution/distribution. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | docker-registry | 2.8.2+ds1-1 | DEBIAN-CVE-2023-2253 |
| Debian:13 | docker-registry | 2.8.2+ds1-1 | DEBIAN-CVE-2023-2253 |
| Debian:14 | docker-registry | 2.8.2+ds1-1 | DEBIAN-CVE-2023-2253 |
| Go | github.com/distribution/distribution | 2.8.2-beta.1+incompatible | GO-2023-1772 |
| Go | github.com/docker/distribution | 2.8.2-beta.1 | GHSA-hqxw-f8mx-cpmw |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | distribution/distribution | NA |
Weakness: CWE-475 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H