Improper resource allocation In docker-registry
Description
A flaw was found in the /v2/_catalog endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: n). This vulnerability allows a malicious user to submit an unreasonably large value for n, causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 13 | 2.8.2+ds1-1 | ||
debian 11 | 2.7.1+ds2-7+deb11u1 | ||
debian 12 | 2.8.2+ds1-1 | ||
debian 14 | 2.8.2+ds1-1 | ||
 go | 2.8.2-beta.1+incompatible | ||
go | 2.8.2-beta.1 |
Aliases
1. 2. 3. 4. 5. 6. 7. 8. 9.
References
1. 2. 3.