CVE:CVE-2021-4178
CNNVD:CNNVD-202201-395
Kubernetes（K8s）是云原生计算基金会（Cloud Native Computing Foundation）的一个开源系统，用于自动部署、扩展和管理容器化应用程序。
Kubernetes client 存在代码问题漏洞，该漏洞源于由于 YAML 解析配置不当，这将允许本地和特权攻击者提供恶意 YAML。
solution:Upgrade redhat fabric8-kubernetes to a higher version than 5.0.3,5.1.2,5.3.2,5.7.4,5.10.2,5.11.2,5.0.0:beta1,5.8.0,and avoid the version [5.0.1,5.0.3),[5.1.0,5.1.2),[5.2.0,5.3.2),[5.5.0,5.7.4),[5.9.0,5.10.2),[5.11.0,5.11.2),5.0.0:beta1,5.8.0; Upgrade redhat a-mq_streams to a higher version than 2.0.1,and avoid the version 2.0.1; Upgrade redhat build_of_quarkus to a higher version than 2.2.5,and avoid the version 2.2.5; Upgrade redhat descision_manager to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat fuse to a higher version than 7.11,and avoid the version 7.11; Upgrade redhat integration_camel_k to a higher version than -; Upgrade redhat integration_camel_quarkus to a higher version than 2.2.1,and avoid the version 2.2.1; Upgrade redhat openshift_application_runtimes to a higher version than -; Upgrade redhat process_automation to a higher version than 7.0,and avoid the version 7.0