PT-2023-6953 · Docker +4 · Docker Distribution +4

🗓️ 09 May 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Vulnerability in /v2/catalog allows denial of service through large n parameter; upgrade to 2.8.2-beta.1 and restrict access.

Reporter	Title	Published	Views	Family All 117
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in go and opm affect IBM Robotic Process Automation.	16 Jul 202413:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GoLang Go and Kubernetes affect IBM watsonx.data	18 Sep 202416:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Distribution	27 Sep 202321:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple operator framework security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	11 Jul 202317:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is affected by opm vulnerability ( CVE-2023-2253 )	6 Dec 202315:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java, Node.js and IBM WebSphere Application Server Liberty	13 Mar 202503:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for September 2023	5 Oct 202308:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for July 2023	28 Jul 202307:30	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to github.com/docker/distribution ( CVE-2023-2253 )	8 Aug 202414:30	–	ibm

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-2253
osv	www.osv.dev/vulnerability/DSA-5414-1
osv	www.osv.dev/vulnerability/DLA-3473-1
ubuntu	www.ubuntu.com/security/CVE-2023-2253
security-tracker	www.security-tracker.debian.org/tracker/DLA-3473-1
ubuntu	www.ubuntu.com/security/notices/USN-6336-1
osv	www.osv.dev/vulnerability/GO-2023-1772
osv	www.osv.dev/vulnerability/GHSA-hqxw-f8mx-cpmw
osv	www.osv.dev/vulnerability/MGASA-2023-0207
ubuntu	www.ubuntu.com/security/CVE-2017-11468

07 Jan 2025 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 25 - 6.8

CVSS 3.16.5 - 7.5

EPSS0.00338

SSVC