Skip to content
Sign in
7.5 High

CVE-2023-32186 A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s…

Description

A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s servers apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects RKE2: from 1.24.0 before 1.24.17+rke2r1, from v1.25.0 before v1.25.13+rke2r1, from v1.26.0 before v1.26.8+rke2r1, from v1.27.0 before v1.27.5+rke2r1, from v1.28.0 before v1.28.1+rke2r1.

Affected products and versions

Product Affected versions Fixed in
RKE2 1.28 1.28.0 → < 1.28.1+rke2r1 1.28.1+rke2r1
RKE2 1.27 1.27.0 → < 1.27.5+rke2r1 1.27.5+rke2r1
RKE2 1.26 1.26.0 → < 1.26.8+rke2r1 1.26.8+rke2r1
RKE2 1.25 1.25.0 → < 1.25.13+rke2r1 1.25.13+rke2r1
RKE2 1.24 1.24.0 → < 1.24.17+rke2r1 1.24.17+rke2r1
Track this CVE