https://bugzilla.redhat.com/show_bug.cgi?id=1474893
--- Doc Text *updated* by Cedric Buissart cbuissar@redhat.com --- It was found that docker-distribution did not properly restrict memory allocation size for a registry instance through the manifest endpoint. An authenticated attacker could upload a specially crafted image that would exhaust the memory of a docker host.