CVE-2023-2253

MEDIUM

OpenShift API for Data Protection - Denial of Service via Large 'n' Parameter in /v2/_catalog Endpoint

Title source: llm
STIX 2.1

Description

A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.

References (2)

Core 2
Core References
Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2189886

Scores

CVSS v3 6.5
EPSS 0.0015
EPSS Percentile 34.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-770 CWE-475
Status published
Products (4)
docker/distribution 0 - 2.8.2-beta.1Go
redhat/openshift_api_for_data_protection
redhat/openshift_container_platform 4.0
redhat/openshift_developer_tools_and_services
Published Jun 06, 2023
Tracked Since Feb 18, 2026