VYPR
← All advisories
High severityNVD Advisory· Published Jun 6, 2023· Updated Jan 7, 2025

CVE-2023-2253

CVE-2023-2253

Description

A flaw was found in the /v2/_catalog endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: n). This vulnerability allows a malicious user to submit an unreasonably large value for n, causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
github.com/docker/distributionGo
< 2.8.2-beta.12.8.2-beta.1

Affected products

48

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.