CVE-2017-11468

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-07-20 · updated 2026-06-17
Weakness: CWE-770

Description

Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service (memory consumption) via the manifest endpoint.

Affected products

Docker Registry: through 2.6.1
RedHat Enterprise Linux Server: 7.0

References

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00047.html
https://access.redhat.com/errata/RHSA-2017:2603
https://github.com/docker/distribution/pull/2340
https://github.com/docker/distribution/releases/tag/v2.6.2
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00047.html
https://access.redhat.com/errata/RHSA-2017:2603
https://github.com/docker/distribution/pull/2340
https://github.com/docker/distribution/releases/tag/v2.6.2

Get alerted when CVE-2017-11468 or the next vulnerability affects your stack