Executive brief
Memory exhaustion in github.com/distribution/distribution
Affected products
- Go github.com/distribution/distribution
- Go github.com/docker/distribution
Junglewise Threat Intelligence
CVE-2023-2253: GO-2023-1772 - Memory exhaustion in github.com/distribution/distribution
CVE-2023-2253 · Severity: low · CVSS 3.1 · Published 2023-05-24
Technologies: github.com/distribution/distribution (Go), github.com/docker/distribution (Go). Vendors: Go.
Related threats
- GO-2026-5094 - Distribution affected by pull-through cache credential exfiltration via www-authenticate bearer realm in github.com/distribution/distributio
- Distribution tag deletion bypasses storage delete configuration
- Distribution stale blob access resurrection in Redis cache backend
- GO-2025-3460 - Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT in github.com/distribution/distribution
- GO-2022-0379 - Type confusion in github.com/docker/distribution