Lucene search
RedHatRHSA-2017:2603HistorySep 05, 2017 - 10:16 a.m.
(RHSA-2017:2603) Low: docker-distribution security, bug fix, and enhancement update
2017-09-0510:16:55
access.redhat.com
62
0.005 Low
EPSS
Percentile
75.9%
The docker-distribution package provides the tool set to support the Docker Registry version 2.
The following packages have been upgraded to a later upstream version: docker-distribution (2.6.2). (BZ#1479494)
Security Fix(es):
- It was found that docker-distribution did not properly restrict memory allocation size for a registry instance through the manifest endpoint. An attacker could send a specially crafted request that would exhaust the memory of the docker-distribution service. (CVE-2017-11468)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | ppc64le | docker-distribution | < 2.6.2-1.git48294d9.el7 | docker-distribution-2.6.2-1.git48294d9.el7.ppc64le.rpm |
| RedHat | 7 | x86_64 | docker-distribution | < 2.6.2-1.git48294d9.el7 | docker-distribution-2.6.2-1.git48294d9.el7.x86_64.rpm |
Related
redhatcve
redhatcve
CVE-2017-11468
2017-07-25 15:19:23
ubuntucve
ubuntucve
CVE-2017-11468
2017-07-20 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:0865-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-6336-1)
2023-09-05 00:00:00
github
github
Docker Registry has Allocation of Resources Without Limits or Throttling
2022-05-13 01:16:08
osv
osv
Uncontrolled resource allocation in github.com/docker/distribution
2021-04-14 20:04:52
Docker Registry has Allocation of Resources Without Limits or Throttling
2022-05-13 01:16:08
CVE-2017-11468
2017-07-20 23:29:00
nessus
nessus
RHEL 7 : docker-distribution (RHSA-2017:2603)
2017-09-08 00:00:00
openSUSE Security Update : docker-distribution (openSUSE-2018-336)
2018-04-06 00:00:00
cve
cve
CVE-2017-11468
2017-07-20 23:29:00
veracode
veracode
Unbounded Memory Allocation
2017-07-21 07:00:56
nvd
nvd
CVE-2017-11468
2017-07-20 23:29:00
prion
prion
Design/Logic Flaw
2017-07-20 23:29:00
cvelist
cvelist
CVE-2017-11468
2017-07-20 23:00:00
debiancve
debiancve
CVE-2017-11468
2017-07-20 23:29:00
suse
suse
Security update for docker-distribution (moderate)
2020-09-18 00:00:00
ubuntu
ubuntu
Docker Registry vulnerabilities
2023-09-04 00:00:00
ibm
ibm
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Docker Registry, OpenSSH and go-git
2024-03-28 10:40:24