https://bugzilla.redhat.com/show_bug.cgi?id=1474893
--- Doc Text *updated* by Cedric Buissart cbuissar@redhat.com --- It was found that docker-distribution did not properly restrict memory allocation size for a registry instance through the manifest endpoint. An attacker could send a specially crafted request that would exhaust the memory of the docker-distribution service.