Docker distribution manifest digest verification bypass vulnerability

Vulnerability Overview Vulnerability Name: Client does not verify returned content against requested digest Description: The method in does not perform hash verification on the returned content when fetching a manifest, allowing an attacker to replace the manifest content. This vulnerability affects applications that rely on digests for content integrity verification, such as image policy controllers and image pull caches. Affected Scope Affected Versions: version = 3.1.2 CVSS Score: 6.8 / 10 Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: High Availability: None Remediation Fixed Version: Upgrade to version >= 3.1.2 POC Code Output Example Impact Any application that calls 's method and relies on digests to ensure image content integrity is affected. This includes image policy controllers, pull cache image implementations (including the bundled implementation), and any CI/CD tools that verify images via digest. An attacker who controls or performs a man-in-the-middle (MITM) attack on registry endpoints can replace arbitrary manifest content—modifying image layers, entrypoints, or referenced blobs—and the client will accept and process the replaced content without warning. The bundled pull cache proxy will cache and re-serve the poisoned manifest to all downstream clients. Exploitation requires control over the registry endpoint configured by the victim, or a MITM/TLS compromise location on the connection. No additional authentication is required beyond what the registry normally demands.

Goal Reached Thanks to every supporter — we hit 100%!

Docker distribution manifest digest verification bypass vulnerability

More from this source