CVE-2023-32186
Published: Sep 19, 2023
Modified: Sep 25, 2024
CVSS v3.1
7.5
Description
A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s servers apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects RKE2: from 1.24.0 before 1.24.17+rke2r1, from v1.25.0 before v1.25.13+rke2r1, from v1.26.0 before v1.26.8+rke2r1, from v1.27.0 before v1.27.5+rke2r1, from v1.28.0 before v1.28.1+rke2r1.
| Vendor | Product | Versions |
|---|---|---|
SUSE | RKE2 | affected 1.24.0 - < 1.24.17+rke2r1affected v1.25.0 - < v1.25.13+rke2r1affected v1.26.0 - < v1.26.8+rke2r1affected v1.27.0 - < v1.27.5+rke2r1affected v1.28.0 - < v1.28.1+rke2r1 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now