Most recent entries from all

bdu:2023-07972

2026-10-03T14:59:34.690397+00:00

bdu:2023-07972

certfr-2024-avi-0297 — De multiples vulnérabilités ont été découvertes dans Juniper. Certaines d'entre elles permettent à un attaquant de prov…

2026-10-03T14:59:34.690443+00:00

certfr-2024-avi-0297

CLEANSTART-2026-SL35444 — Security fix for CVE-2023-2253 applied in: paranoia 0.2.1-r0

2026-10-03T14:59:34.690464+00:00

Affected: CleanStart: paranoia

Security vulnerability affects the paranoia package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-209454

2026-10-03T14:59:34.690493+00:00

EUVD-2026-209454

fkie_cve-2023-2253

2026-10-03T14:59:34.690505+00:00

A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.

GHSA-hqxw-f8mx-cpmw — distribution catalog API endpoint can lead to OOM via malicious user input

2026-10-03T14:59:34.690528+00:00

Affected: Go: github.com/docker/distribution

### Impact

Systems that run `distribution` built after a specific commit running on memory-restricted environments can suffer from denial of service by a crafted malicious `/v2/_catalog` API endpoint request.

### Patches

Upgrade to at least 2.8.2-beta.1 if you are running `v2.8.x` release. If you use the code from the main branch, update at least to the commit after [f55a6552b006a381d9167e328808565dd2bf77dc](https://github.com/distribution/distribution/commit/f55a6552b006a381d9167e328808565dd2bf77dc).

### Workarounds

There is no way to work around this issue without patching. Restrict access to the affected API endpoint: see the recommendations section.

### References

`/v2/_catalog` endpoint accepts a parameter to control the maximum amount of records returned (query string: `n`).

When not given the default `n=100` is used. The server trusts that `n` has an acceptable value, however when using a maliciously large value, it allocates an array/slice of `n` of strings before filling the slice with data.

This behaviour was introduced ~7yrs ago [1].

### Recommendation

The `/v2/_catalog` endpoint was designed specifically to do registry syncs with search or other API systems. Such an endpoint would create a lot of load on the backend system, due to overfetch required to serve a request in certain implementations.

Because of this, we strongly recommend keeping this API endpoint behind heightened privilege and avoiding leaving it exposed to the internet.

### For mor…

gsd-2023-2253

2026-10-03T14:59:34.690571+00:00

gsd-2023-2253

msrc_CVE-2023-2253 — A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution which accepts a parameter to control the m…

2026-10-03T14:59:34.690583+00:00

msrc_CVE-2023-2253

openSUSE-SU-2024:12926-1 — distribution-registry-2.8.2-1.1 on GA media

2026-10-03T14:59:34.690602+00:00

distribution-registry-2.8.2-1.1 on GA media

RHSA-2023:5155 — Red Hat Security Advisory: [impact]: OpenShift Container Platform 4.13.13 bug fix and security update

2026-10-03T14:59:34.690617+00:00

distribution/distribution: DoS from malicious API request

SUSE-SU-2023:2153-1 — Security update for docker-distribution

2026-10-03T14:59:34.690632+00:00

Security update for docker-distribution

UBUNTU-CVE-2023-2253

2026-10-03T14:59:34.690645+00:00

Affected: Ubuntu:Pro:16.04:LTS: docker-registry, Ubuntu:Pro:18.04:LTS: docker-registry, Ubuntu:20.04:LTS: docker-registry, Ubuntu:Pro:22.04:LTS: docker-registry

WID-SEC-W-2023-2388 — Red Hat OpenShift: Schwachstelle ermöglicht Denial of Service

2026-10-03T14:59:34.690668+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen.