A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6336-1 advisory.

  - Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content     accepted from a user, which allows remote attackers to cause a denial of service (memory consumption) via     the manifest endpoint. (CVE-2017-11468)

  - A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to     control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious     user to submit an unreasonably large value for `n,` causing the allocation of a massive string array,     possibly causing a denial of service through excessive use of memory. (CVE-2023-2253)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3473 advisory.

  - A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to     control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious     user to submit an unreasonably large value for `n,` causing the allocation of a massive string array,     possibly causing a denial of service through excessive use of memory. (CVE-2023-2253)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5414 advisory.

  - Systems that run distribution built after a specific commit running on memory-restricted environments can     suffer from denial of service by a crafted malicious /v2/_catalog API endpoint request. (CVE-2023-2253)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2298-1 advisory.

  - A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to     control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious     user to submit an unreasonably large value for `n,` causing the allocation of a massive string array,     possibly causing a denial of service through excessive use of memory. (CVE-2023-2253)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2153-1 advisory.

  - A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to     control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious     user to submit an unreasonably large value for `n,` causing the allocation of a massive string array,     possibly causing a denial of service through excessive use of memory. (CVE-2023-2253)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2154-1 advisory.

  - A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to     control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious     user to submit an unreasonably large value for `n,` causing the allocation of a massive string array,     possibly causing a denial of service through excessive use of memory. (CVE-2023-2253)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
180473	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM / 23.04 : Docker Registry vulnerabilities (USN-6336-1)	Nessus	Ubuntu Local Security Checks	high
177791	Debian DLA-3473-1 : docker-registry - LTS security update	Nessus	Debian Local Security Checks	medium
176435	Debian DSA-5414-1 : docker-registry - security update	Nessus	Debian Local Security Checks	medium
176402	SUSE SLES15 / openSUSE 15 Security Update : distribution (SUSE-SU-2023:2298-1)	Nessus	SuSE Local Security Checks	medium
175546	SUSE SLES12 Security Update : docker-distribution (SUSE-SU-2023:2153-1)	Nessus	SuSE Local Security Checks	medium
175532	SUSE SLES15 / openSUSE 15 Security Update : distribution (SUSE-SU-2023:2154-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2023-2253

medium

Tenable Plugins

high

medium

medium

medium

medium

medium