CVE-2017-11468: Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accept...

Security readout for executives and security teams

This flaw lets a remote user send too much content to a Docker Registry manifest endpoint, causing excessive memory use and possible service outage. It affects Docker Registry before 2.6.2 in Docker Distribution. The source bundle does not show active exploitation or a CVSS score. Exposure is likely where an organization runs Docker Distribution Registry versions before 2.6.2, especially if registry endpoints are reachable by untrusted users. The bundle does not identify specific downstream package versions beyond vendor advisories. Prioritize remediation for internet-facing or shared registries because the impact is service disruption. Treat internal-only, authenticated registries as lower urgency unless they support critical delivery workflows. Lack of active exploitation evidence reduces emergency pressure but does not remove outage risk. Mitigation focus: Upgrade Docker Distribution Registry to 2.6.2 or later.; Apply applicable Red Hat or openSUSE security updates if using those packages.; Check current vendor guidance for supported patched versions..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.