docker registry vulnerabilities

Latest docker registry CVEs

Newest publication first

1. CVE-2017-11468 Docker Registry has Allocation of Resources Without Limits or Throttling

   Published 2017-07-20

   High·CVSS 7.5 EPSS 3.2%

   Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service (memory consumption) via the manifest endpoint.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.