Vulnerability Database
296,720
Total vulnerabilities in the database
CVE-2023-2253
A flaw was found in the /v2/_catalog endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: n). This vulnerability allows a malicious user to submit an unreasonably large value for n, causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.
| Software | From | Fixed in |
|---|---|---|
github.com/docker/distribution
|
- | 2.8.2-beta.1 |
| redhat / openshift_container_platform | 4.0 | 4.0.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime