CVE-2017-11468: High severity docker registry vulnerability
Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service (memory consumption) via the manifest endpoint.
Other sources
Docker Registry in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service (memory consumption) via the manifest endpoint.
Upstream patch:
https://github.com/docker/distribution/commit/29fa466debaabb64f8559116bbffd20a289d523c
References:
https://github.com/docker/distribution/releases/tag/v2.6.2
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-11468?
CVE-2017-11468 is a vulnerability in Docker Registry before version 2.6.2 in Docker Distribution that allows remote attackers to cause a denial of service (memory consumption) via the manifest endpoint.
How severe is CVE-2017-11468?
CVE-2017-11468 has a severity rating of 7.5 out of 10, which is considered high.
How can I fix CVE-2017-11468?
To fix CVE-2017-11468, update Docker Registry to version 2.7.0-rc.0 or higher.
Where can I find more information about CVE-2017-11468?
You can find more information about CVE-2017-11468 at the following references: [GitHub Pull Request](https://github.com/docker/distribution/pull/2340), [GitHub Release](https://github.com/docker/distribution/releases/tag/v2.6.2), [Red Hat Security Advisory](https://access.redhat.com/errata/RHSA-2017:2603).
What is the CWE ID for CVE-2017-11468?
The CWE ID for CVE-2017-11468 is 770.