CVE:CVE-2021-41190
CNNVD:CNNVD-202111-1560
Oci Distribution-Spec是一个 Oci 分发规范。
Oci Distribution-Spec 存在代码问题漏洞，该漏洞源于产品使用Content-Type头来判断文档类型以及其他操作。攻击者可通过该漏洞导致文本内容改变。以下产品及版本受到影响：OCI Distribution Specification 1.0.1 之前版本。
solution:Upgrade linuxfoundation open_container_initiative_distribution_specification to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade linuxfoundation open_container_initiative_image_format_specification to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35