一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月7日

CVE-2026-78243 – Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due t

未分类
📑 文章目录

Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record does not start with “CN=”.

This only affects install that have the non default LDAP group provider configured. 

Users are recommended to upgrade to version 1.10.0, which fixes this issue.