EUVD-2023-1561

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Flaw in /v2/_catalog endpoint allows denial of service from excessive memory allocation using parameter n.

Reporter	Title	Published	Views	Family All 88
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GoLang Go and Kubernetes affect IBM watsonx.data	18 Sep 202416:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Distribution	27 Sep 202321:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple operator framework security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	11 Jul 202317:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is affected by opm vulnerability ( CVE-2023-2253 )	6 Dec 202315:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java, Node.js and IBM WebSphere Application Server Liberty	13 Mar 202503:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for September 2023	5 Oct 202308:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for July 2023	28 Jul 202307:30	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to github.com/docker/distribution ( CVE-2023-2253 )	8 Aug 202414:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager September 2023 - Multiple CVEs addressed	28 Sep 202307:41	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "8dc7d8b1-6ff7-3bca-9ba8-6e5dc5635cf7",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
github	www.github.com/distribution/distribution/security/advisories/GHSA-hqxw-f8mx-cpmw
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-2253
github	www.github.com/distribution/distribution/commit/f55a6552b006a381d9167e328808565dd2bf77dc
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/distribution/distribution
lists	www.lists.debian.org/debian-lts-announce/2023/06/msg00035.html

03 Oct 2025 20:07Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.5

EPSS0.00147

SSVC