Docker Registry DoS via /v2/_catalog n param
CVE-2023-2253 Published on June 6, 2023
A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.
Vulnerability Analysis
CVE-2023-2253 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
Undefined Behavior for Input to API
The behavior of this function is undefined unless its control parameter is set to a specific value.
Products Associated with CVE-2023-2253
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2023-2253 are published in these products:
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.