CVE:CVE-2022-21698
CNNVD:CNNVD-202202-1280
Prometheus是一款使用Go语言编写的、用于记录使用HTTP拉模型构建的时间序列数据库中实时指标的开源软件。
prometheus client golang存在资源管理错误漏洞，该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。
solution:Upgrade prometheus client_golang to a higher version than 1.11.1,and avoid the version (,1.11.1); Upgrade fedoraproject fedora to a higher version than 34,35,36,37,and avoid the version 34,35,36,37; Upgrade fedoraproject extra_packages_for_enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade rdo_project rdo to a higher version than -