CVE:CVE-2022-39272
CNNVD:CNNVD-202210-1612
Flux2是云原生计算基金会（Cloud Native Computing Foundation）的一种使 Kubernetes 集群与配置源保持同步的工具。
Flux2 0.35.0 之前版本存在安全漏洞，该漏洞源于有权更改 Flux 对象的用户可以通过对特定字段提交无效数据导致拒绝服务（Dos）。
solution:Upgrade fluxcd flux2 to a higher version than 0.35.0,and avoid the version [0.1.0,0.35.0); Upgrade fluxcd helm-controller to a higher version than 0.24.0,0.0.1:alpha1,0.0.1:alpha2,0.0.1:beta1,0.0.1:beta2,0.0.1:beta3,0.0.1:beta4,and avoid the version [0.0.2,0.24.0),0.0.1:alpha1,0.0.1:alpha2,0.0.1:beta1,0.0.1:beta2,0.0.1:beta3,0.0.1:beta4; Upgrade fluxcd image-automation-controller to a higher version than 0.26.0,and avoid the version [0.1.0,0.26.0); Upgrade fluxcd image-reflector-controller to a higher version than 0.22.0,and avoid the version [0.1.0,0.22.0); Upgrade fluxcd kustomize-controller to a higher version than 0.29.0,0.0.1:alpha1,0.0.1:alpha2,0.0.1:alpha3,0.0.1:alpha4,0.0.1:alpha5,0.0.1:alpha6,0.0.1:alpha7,0.0.1:alpha8,0.0.1:alpha9,0.0.1:beta1,0.0.1:beta2,and avoid the version [0.0.2,0.29.0),0.0.1:alpha1,0.0.1:alpha2,0.0.1:alpha3,0.0.1:alpha4,0.0.1:alpha5,0.0.1:alpha6,0.0.1:alpha7,0.0.1:alpha8,0.0.1:alpha9,0.0.1:beta1,0.0.1:beta2; Upgrade fluxcd notification-controller to a higher version than 0.27.0,0.0.1:alpha1,0.0.1:alpha2,0.0.1:beta1,and avoid the version [0.0.2,0.27.0),0.0.1:alpha1,0.0.1:alpha2,0.0.1:beta1; Upgrade fluxcd source-controller to a higher version than 0.30.0,0.0.1:alpha1,0.0.1:alpha2,0.0.1:alpha3,0.0.1:alpha4,0.0.1:alpha5,0.0.1:alpha6,0.0.1:beta1,0.0.1:beta2,and avoid the version [0.0.2,0.30.0),0.0.1:alpha1,0.0.1:alpha2,0.0.1:alpha3,0.0.1:alpha4,0.0.1:alpha5,0.0.1:alpha6,0.0.1:beta1,0.0.1:beta2