RHSA-2017:2603-01 -- Redhat docker-distributionID: oval:org.secpod.oval:def:502183 | Date: (C)2017-10-25 (M)2023-01-27 |
Class: PATCH | Family: unix |
The docker-distribution package provides the tool set to support the Docker Registry version 2. The following packages have been upgraded to a later upstream version: docker-distribution . Security Fix: * It was found that docker-distribution did not properly restrict memory allocation size for a registry instance through the manifest endpoint. An attacker could send a specially crafted request that would exhaust the memory of the docker-distribution service
Platform: |
Red Hat Enterprise Linux 7 |
Product: |
docker-distribution |