← Back

CVE-2023-32186

nvd nist
Published: Sep 19, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s servers apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects RKE2: from 1.24.0 before 1.24.17+rke2r1, from v1.25.0 before v1.25.13+rke2r1, from v1.26.0 before v1.26.8+rke2r1, from v1.27.0 before v1.27.5+rke2r1, from v1.28.0 before v1.28.1+rke2r1.

Affected (6)

Products: Suse: Rancher Rke2
Suse
1 product
Rancher Rke2
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Suse
Rancher Rke2
From 1.24.0\+rke2r1 to 1.24.17\+rke2r1
Rancher Rke2
From 1.25.0\+rke2r1 to 1.25.13\+rke2r1
Rancher Rke2
From 1.26.0\+rke2r1 to 1.26.8\+rke2r1
Rancher Rke2
From 1.27.1\+rke2r1 to 1.27.5\+rke2r1
Rancher Rke2
Version 1.28.1+rke2r1 rc1
Rancher Rke2
Version 1.28.1+rke2r1 rc2

Related CWEs

CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (4)

Source: meissner@suse.de
Issue TrackingVendor Advisory
Source: meissner@suse.de
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory

Timeline

No history available yet.