Type Confusion in OCI Distribution Specification - CVE-2021-41190

Vulnerability identifier: #VU58229

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N]

CVE-ID: CVE-2021-41190

CWE-ID: CWE-843

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the system.

The vulnerability exists due to a type confusion error. A remote authenticated attacker can pass specially crafted data to the application, trigger a type confusion error and interpret the resulting content differently.

OCI Distribution Specification
OpenShift API for Data Protection (OADP)
Oracle Linux
Amazon Linux AMI
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Containers
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server for SAP
openSUSE Leap
Fedora
containerd
distribution
DB2 on Cloud Pak for Data
DB2 Warehouse on Cloud Pak for Data
Singularity
Podman
Red Hat Advanced Cluster Security for Kubernetes
Dell Secure Connect Gateway
IBM Robotic Process Automation
Red Hat Advanced Cluster Management for Kubernetes
IBM Fusion HCI
IBM Edge Application Manager
Red Hat OpenShift Container Platform
Migration Toolkit for Containers
moby
OpenShift Virtualization
toolbox (Red Hat package)
rust-bootupd (Red Hat package)
python-oslo-metrics (Red Hat package)
python-autopage (Red Hat package)
containernetworking-plugins (Red Hat package)
stargz-snapshotter
python-scciclient (Red Hat package)
coreos-installer (Red Hat package)
butane (Red Hat package)
console-login-helper-messages (Red Hat package)
python-hardware (Red Hat package)
python-openstacksdk (Red Hat package)
runc (Red Hat package)
golang-github-opencontainers-image-spec
golang-github-containerd-ttrpc
skopeo (Red Hat package)
python-oslo-upgradecheck (Red Hat package)
fuse-overlayfs (Red Hat package)
crun (Red Hat package)
containerd
skopeo
containers-common (Red Hat package)
buildah (Red Hat package)
cri-tools (Red Hat package)
cri-o (Red Hat package)
haproxy (Red Hat package)
python-debtcollector (Red Hat package)
kata-containers (Red Hat package)
python-osc-lib (Red Hat package)
python-oslo-service (Red Hat package)
python-tooz (Red Hat package)
python-proliantutils (Red Hat package)
ignition (Red Hat package)
openvswitch2.16 (Red Hat package)
jenkins (Red Hat package)
podman (Red Hat package)
python-sushy-oem-idrac (Red Hat package)
python-ironic-prometheus-exporter (Red Hat package)
python-cachetools (Red Hat package)
python-oslo-context (Red Hat package)
python-stevedore (Red Hat package)
python-oslo-policy (Red Hat package)
python-cliff (Red Hat package)
python-sushy (Red Hat package)
python-oslo-serialization (Red Hat package)
podman
podman-cni-config
podman-debuginfo
podman-docker
podman-remote
podman-remote-debuginfo
python-keystoneauth1 (Red Hat package)
python-oslo-concurrency (Red Hat package)
python-oslo-log (Red Hat package)
python-ironicclient (Red Hat package)
python-oslo-utils (Red Hat package)
openshift-ansible (Red Hat package)
atomic-openshift-service-idler (Red Hat package)
openshift-kuryr (Red Hat package)
openshift-clients (Red Hat package)
openshift (Red Hat package)
jenkins-2-plugins (Red Hat package)
python-oslo-i18n (Red Hat package)
python-ironic-lib (Red Hat package)
rust-afterburn (Red Hat package)
python-pbr (Red Hat package)
python-dracclient (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
python-oslo-config (Red Hat package)
python-oslo-db (Red Hat package)
openstack-ironic-inspector (Red Hat package)
python-oslo-messaging (Red Hat package)
openstack-ironic (Red Hat package)
moby-engine
docker
docker-debuginfo
docker-bash-completion
docker-fish-completion
ovn21.09 (Red Hat package)
ovn-2021 (Red Hat package)
ovn21.12 (Red Hat package)
redhat-release-coreos (Red Hat package)
IBM CICS TX Standard
IBM CICS TX Advanced

Install update from vendor's website.

OCI Distribution Specification - update to 1.0.1
containerd - addressed in versions 1.4.12, 1.5.8
Singularity - update to 3.8.5
Red Hat Advanced Cluster Security for Kubernetes - update to 3.70
Podman - update to 3.4.3
Red Hat OpenShift Container Platform - addressed in versions 4.10.3, 4.11.0, 4.12.4
Dell Secure Connect Gateway - update to 5.12.00.10
moby - update to 20.10.11
IBM Robotic Process Automation - update to 21.0.3.1
toolbox (Red Hat package) - update to 0.0.8-4.rhaos4.10.el8
rust-bootupd (Red Hat package) - update to 0.2.5-3.rhaos4.10.el8
python-oslo-metrics (Red Hat package) - update to 0.3.0-0.20211020174122.43eee50.el8
python-autopage (Red Hat package) - update to 0.4.0-1.el8
containernetworking-plugins (Red Hat package) - update to 0.9.1-1.rhaos4.10.el8
stargz-snapshotter - addressed in versions 0.10.1-1.fc34, 0.10.1-1.fc35
python-scciclient (Red Hat package) - update to 0.11.1-0.20211208154124.a84332b.el8
coreos-installer (Red Hat package) - update to 0.12.0-1.rhaos4.10.el8
butane (Red Hat package) - update to 0.14.0-1.rhaos4.10.el8
console-login-helper-messages (Red Hat package) - update to 0.20.3-1.rhaos4.10.el8
python-hardware (Red Hat package) - update to 0.29.0-0.20211122094056.7662a1d.el8
python-openstacksdk (Red Hat package) - update to 0.59.0-0.20211012172340.d0d4d8b.el8
OpenShift API for Data Protection (OADP) - update to 1.0.1
runc (Red Hat package) - addressed in versions 1.0.1-3.rhaos4.10.git4144b63.el7, 1.1.0-1.rhaos4.10.el8
golang-github-opencontainers-image-spec - addressed in versions 1.0.2-1.fc34, 1.0.2-1.fc35, 1.0.2-1.fc36
golang-github-containerd-ttrpc - addressed in versions 1.1.0-1.fc34, 1.1.0-1.fc35
skopeo (Red Hat package) - update to 1.2.2-1.rhaos4.10.el8
python-oslo-upgradecheck (Red Hat package) - update to 1.4.0-0.20211012144915.3ca8698.el8
fuse-overlayfs (Red Hat package) - update to 1.4.0-1.rhaos4.10.el8
crun (Red Hat package) - update to 1.4.2-1.rhaos4.10.el8
containerd - addressed in versions 1.4.12-16.49.1, 1.4.12-60.1, 1.5.11-16.57.1
skopeo - addressed in versions 1.5.2-1.fc34, 1.5.2-1.fc35
Migration Toolkit for Containers - addressed in versions 1.5.4, 1.7.1
containerd - addressed in versions 1.5.8-1.fc34, 1.5.8-1.fc35, 1.5.8-1.fc36
containers-common (Red Hat package) - update to 1-16.rhaos4.10.el8
buildah (Red Hat package) - update to 1.19.7-1.el8
cri-tools (Red Hat package) - addressed in versions 1.23.0-1.el7, 1.23.0-1.el8
cri-o (Red Hat package) - addressed in versions 1.23.0-92.rhaos4.10.gitdaab4d1.el7, 1.23.1-9.rhaos4.10.gitbdffb9a.el8
haproxy (Red Hat package) - update to 2.2.19-1.el8
python-debtcollector (Red Hat package) - update to 2.3.0-0.20211012161119.0bf5bf5.el8
kata-containers (Red Hat package) - update to 2.3.0-3.el8
python-osc-lib (Red Hat package) - update to 2.4.2-0.20211012163041.415a6c7.el8
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.4.3, 2.5.0
python-oslo-service (Red Hat package) - update to 2.6.0-0.20211012154519.091fd65.el8
distribution - update to 2.8.0 beta.1
IBM Fusion HCI - update to 2.8.0
python-tooz (Red Hat package) - update to 2.9.0-0.20211012145018.174065f.el8
python-proliantutils (Red Hat package) - update to 2.12.2-0.20211210161243.500f518.el8
ignition (Red Hat package) - update to 2.13.0-2.rhaos4.10.el8
openvswitch2.16 (Red Hat package) - update to 2.16.0-33.el8fdp
jenkins (Red Hat package) - update to 2.319.2.1643288987-1.el8
podman (Red Hat package) - update to 3.0.1-7.rhaos4.10.el8
python-sushy-oem-idrac (Red Hat package) - update to 3.0.2-0.20211011174039.9733d23.el8
python-ironic-prometheus-exporter (Red Hat package) - update to 3.1.0-0.20211130174057.d25ba32.el8
python-cachetools (Red Hat package) - update to 3.1.0-2.el8ost
python-oslo-context (Red Hat package) - update to 3.3.1-0.20211012152439.641a1e0.el8
python-stevedore (Red Hat package) - update to 3.4.0-0.20211012153718.8846a3f.el8
python-oslo-policy (Red Hat package) - update to 3.8.2-0.20211012161944.c7fd9f4.el8
python-cliff (Red Hat package) - update to 3.9.0-0.20211020191737.734bc0c.el8
python-sushy (Red Hat package) - update to 4.0.0-0.20211209155954.45d24d4.el8
python-oslo-serialization (Red Hat package) - update to 4.2.0-0.20211012151454.2b94a4f.el8
podman - addressed in versions 4.3.1-150300.9.15.1, 4.3.1-150400.4.11.1
podman-cni-config - addressed in versions 4.3.1-150300.9.15.1, 4.3.1-150400.4.11.1
podman-debuginfo - addressed in versions 4.3.1-150300.9.15.1, 4.3.1-150400.4.11.1
podman-docker - update to 4.3.1-150400.4.11.1
podman-remote - update to 4.3.1-150400.4.11.1
podman-remote-debuginfo - update to 4.3.1-150400.4.11.1
python-keystoneauth1 (Red Hat package) - update to 4.4.0-0.20211012144044.112bcae.el8
python-oslo-concurrency (Red Hat package) - update to 4.4.1-0.20211012150632.8e08400.el8
python-oslo-log (Red Hat package) - update to 4.6.0-0.20211012154701.41c8807.el8
DB2 on Cloud Pak for Data - update to 4.8.2
DB2 Warehouse on Cloud Pak for Data - update to 4.8.2
python-ironicclient (Red Hat package) - update to 4.9.0-0.20211209154934.6f1be06.el8
python-oslo-utils (Red Hat package) - update to 4.10.0-0.20211012164840.2c74bb9.el8
openshift-ansible (Red Hat package) - update to 4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7
atomic-openshift-service-idler (Red Hat package) - update to 4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8
openshift-kuryr (Red Hat package) - update to 4.10.0-202202160023.p0.ge77f917.assembly.stream.el8
openshift-clients (Red Hat package) - addressed in versions 4.10.0-202202160023.p0.gf93da17.assembly.stream.el7, 4.10.0-202202160023.p0.gf93da17.assembly.stream.el8
openshift (Red Hat package) - addressed in versions 4.10.0-202202250816.p0.ge419edf.assembly.stream.el7, 4.10.0-202202250816.p0.ge419edf.assembly.stream.el8
OpenShift Virtualization - update to 4.10.1
jenkins-2-plugins (Red Hat package) - update to 4.10.1643404185-1.el8
python-oslo-i18n (Red Hat package) - update to 5.1.0-0.20211012165753.b031d17.el8
python-ironic-lib (Red Hat package) - update to 5.1.0-0.20211209154936.731e2f9.el8
rust-afterburn (Red Hat package) - update to 5.2.0-1.rhaos4.10.el8
python-pbr (Red Hat package) - update to 5.5.1-1.el8ost
python-dracclient (Red Hat package) - update to 7.0.0-0.20211012182751.d26664e.el8
openstack-ironic-python-agent (Red Hat package) - update to 8.3.1-0.20220105174059.d2d3cd6.el8
python-oslo-config (Red Hat package) - update to 8.7.1-0.20211012155707.1a7bd66.el8
python-oslo-db (Red Hat package) - update to 9.1.0-0.20211020204148.be2cc6a.el8
openstack-ironic-inspector (Red Hat package) - update to 10.9.1-0.20220117094044.19e2592.el8
IBM CICS TX Standard - update to 11.1.0.0 ifix5
IBM CICS TX Advanced - update to 11.1.0.0 ifix5
python-oslo-messaging (Red Hat package) - update to 12.9.1-0.20211020204149.f9de265.el8
openstack-ironic (Red Hat package) - update to 19.0.1-0.20220120204037.438b8af.el8
moby-engine - addressed in versions 20.10.11-1.fc34, 20.10.11-1.fc35, 20.10.11-1.fc36
docker - addressed in versions 20.10.12_ce-98.75.1, 20.10.12_ce-159.1, 20.10.14_ce-98.80.1
docker-debuginfo - addressed in versions 20.10.12_ce-98.75.1, 20.10.12_ce-159.1, 20.10.14_ce-98.80.1
docker-bash-completion - update to 20.10.12_ce-159.1
docker-fish-completion - update to 20.10.12_ce-159.1
ovn21.09 (Red Hat package) - update to 21.09.0-22.el8fdp
ovn-2021 (Red Hat package) - update to 21.12.0-15.el8fdp
ovn21.12 (Red Hat package) - update to 21.12.0-25.el8fdp
redhat-release-coreos (Red Hat package) - update to 410.84-2.el8

• https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m
• https://github.com/opencontainers/distribution-spec/commit/ac28cac0557bcd3084714ab09f9f2356fe504923

• Type Confusion in OCI Distribution Specification
• Type Confusion in moby
• Type Confusion in containerd
• Amazon Linux AMI update for containerd, docker
• singularity update for OCI specifications
• Multiple vulnerabilities in Podman
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes
• Multiple vulnerabilities in DELL Secure Connect Gateway Security
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Red Hat Enterprise Linux 8 update for the container-tools:rhel8 module
• SUSE update for podman
• SUSE update for podman
• Type confusion in IBM CICS TX Advanced
• Type confusion in IBM CICS TX Standard
• Multiple vulnerabilities in OpenShift Container Platform 4.12
• SUSE update for containerd, docker
• SUSE update for containerd, docker
• SUSE update for containerd, docker
• Multiple vulnerabilities in IBM Edge Application Manager
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data
• Multiple vulnerabilities in IBM Storage Fusion HCI
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.0
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.10
• Multiple vulnerabilities in Migration Toolkit for Containers 1.5
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.4
• Multiple vulnerabilities in Migration Toolkit for Containers 1.7
• Multiple vulnerabilities in OpenShift Virtualization 4.10
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2
• Fedora 35 update for stargz-snapshotter
• Fedora 34 update for stargz-snapshotter
• Fedora 36 update for containerd
• Fedora 36 update for moby-engine
• Fedora 35 update for containerd, golang-github-containerd-ttrpc, moby-engine
• Fedora 34 update for containerd, golang-github-containerd-ttrpc, moby-engine
• Fedora 35 update for skopeo
• Fedora 34 update for skopeo
• Fedora 36 update for golang-github-opencontainers-image-spec
• Fedora 34 update for golang-github-opencontainers-image-spec
• Fedora 35 update for golang-github-opencontainers-image-spec
• Docker Distribution update for OCI Manifest