SuseCVELIST:CVE-2023-32186CVE-2023-32186
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.0005 Low
EPSS
Percentile
17.0%
A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s servers apiserver/supervisor port (TCP 6443) cause denial of service.
This issue affects RKE2: from 1.24.0 before 1.24.17+rke2r1, from v1.25.0 before v1.25.13+rke2r1, from v1.26.0 before v1.26.8+rke2r1, from v1.27.0 before v1.27.5+rke2r1, from v1.28.0 before v1.28.1+rke2r1.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "RKE2",
"vendor": "SUSE",
"versions": [
{
"lessThan": "1.24.17+rke2r1",
"status": "affected",
"version": "1.24.0",
"versionType": "semver"
},
{
"lessThan": "v1.25.13+rke2r1",
"status": "affected",
"version": "v1.25.0",
"versionType": "semver"
},
{
"lessThan": "v1.26.8+rke2r1",
"status": "affected",
"version": "v1.26.0",
"versionType": "semver"
},
{
"lessThan": "v1.27.5+rke2r1",
"status": "affected",
"version": "v1.27.0",
"versionType": "semver"
},
{
"lessThan": "v1.28.1+rke2r1",
"status": "affected",
"version": "v1.28.0",
"versionType": "semver"
}
]
}
]Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.0005 Low
EPSS
Percentile
17.0%