https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:19:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07972 bdu:2023-07972 https://cve.radiocsirt.org/vuln/bdu:2023-07972 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0297 certfr-2024-avi-0297 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0297 https://cve.radiocsirt.org/vuln/cleanstart-2026-sl35444 <p><strong>Affected:</strong> CleanStart: paranoia</p> <p>Security vulnerability affects the paranoia package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: paranoia</p> <p>Security vulnerability affects the paranoia package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-sl35444 https://cve.radiocsirt.org/vuln/euvd-2026-209454 EUVD-2026-209454 https://cve.radiocsirt.org/vuln/euvd-2026-209454 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2253 <p>A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.</p> <p>A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-2253 https://cve.radiocsirt.org/vuln/ghsa-hqxw-f8mx-cpmw <p><strong>Affected:</strong> Go: github.com/docker/distribution</p> <p>### Impact</p> <p>Systems that run `distribution` built after a specific commit running on memory-restricted environments can suffer from denial of service by a crafted malicious `/v2/_catalog` API endpoint request.</p> <p>### Patches</p> <p>Upgrade to at least 2.8.2-beta.1 if you are running `v2.8.x` release. If you use the code from the main branch, update at least to the commit after [f55a6552b006a381d9167e328808565dd2bf77dc](https://github.com/distribution/distribution/commit/f55a6552b006a381d9167e328808565dd2bf77dc).</p> <p>### Workarounds</p> <p>There is no way to work around this issue without patching. Restrict access to the affected API endpoint: see the recommendations section.</p> <p>### References</p> <p>`/v2/_catalog` endpoint accepts a parameter to control the maximum amount of records returned (query string: `n`).</p> <p>When not given the default `n=100` is used. The server trusts that `n` has an acceptable value, however when using a maliciously large value, it allocates an array/slice of `n` of strings before filling the slice with data.</p> <p>This behaviour was introduced ~7yrs ago [1].</p> <p>### Recommendation</p> <p>The `/v2/_catalog` endpoint was designed specifically to do registry syncs with search or other API systems. Such an endpoint would create a lot of load on the backend system, due to overfetch required to serve a request in certain implementations.</p> <p>Because of this, we strongly recommend keeping this API endpoint behind heightened privilege and avoiding leaving it exposed to the internet.</p> <p>### For mor…</p> <p><strong>Affected:</strong> Go: github.com/docker/distribution</p> <p>### Impact</p> <p>Systems that run `distribution` built after a specific commit running on memory-restricted environments can suffer from denial of service by a crafted malicious `/v2/_catalog` API endpoint request.</p> <p>### Patches</p> <p>Upgrade to at least 2.8.2-beta.1 if you are running `v2.8.x` release. If you use the code from the main branch, update at least to the commit after [f55a6552b006a381d9167e328808565dd2bf77dc](https://github.com/distribution/distribution/commit/f55a6552b006a381d9167e328808565dd2bf77dc).</p> <p>### Workarounds</p> <p>There is no way to work around this issue without patching. Restrict access to the affected API endpoint: see the recommendations section.</p> <p>### References</p> <p>`/v2/_catalog` endpoint accepts a parameter to control the maximum amount of records returned (query string: `n`).</p> <p>When not given the default `n=100` is used. The server trusts that `n` has an acceptable value, however when using a maliciously large value, it allocates an array/slice of `n` of strings before filling the slice with data.</p> <p>This behaviour was introduced ~7yrs ago [1].</p> <p>### Recommendation</p> <p>The `/v2/_catalog` endpoint was designed specifically to do registry syncs with search or other API systems. Such an endpoint would create a lot of load on the backend system, due to overfetch required to serve a request in certain implementations.</p> <p>Because of this, we strongly recommend keeping this API endpoint behind heightened privilege and avoiding leaving it exposed to the internet.</p> <p>### For mor…</p> https://cve.radiocsirt.org/vuln/ghsa-hqxw-f8mx-cpmw https://cve.radiocsirt.org/vuln/gsd-2023-2253 gsd-2023-2253 https://cve.radiocsirt.org/vuln/gsd-2023-2253 https://cve.radiocsirt.org/vuln/msrc_cve-2023-2253 msrc_CVE-2023-2253 https://cve.radiocsirt.org/vuln/msrc_cve-2023-2253 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12926-1 <p>distribution-registry-2.8.2-1.1 on GA media</p> <p>distribution-registry-2.8.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12926-1 https://cve.radiocsirt.org/vuln/rhsa-2023:5155 <p>distribution/distribution: DoS from malicious API request</p> <p>distribution/distribution: DoS from malicious API request</p> https://cve.radiocsirt.org/vuln/rhsa-2023:5155 https://cve.radiocsirt.org/vuln/suse-su-2023:2153-1 <p>Security update for docker-distribution</p> <p>Security update for docker-distribution</p> https://cve.radiocsirt.org/vuln/suse-su-2023:2153-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-2253 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: docker-registry, Ubuntu:Pro:18.04:LTS: docker-registry, Ubuntu:20.04:LTS: docker-registry, Ubuntu:Pro:22.04:LTS: docker-registry</p> <p>A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: docker-registry, Ubuntu:Pro:18.04:LTS: docker-registry, Ubuntu:20.04:LTS: docker-registry, Ubuntu:Pro:22.04:LTS: docker-registry</p> <p>A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-2253 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2388 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2388