Allocation of Resources Without Limits Vulnerability in SUSE RKE2 by SUSE

CVE-2023-32186

What is CVE-2023-32186?

A resource allocation vulnerability in SUSE RKE2 allows attackers with access to the K3s servers apiserver or supervisor port (TCP 6443) to cause a denial of service. This issue affects multiple versions of RKE2, allowing attackers to exploit system resources without sufficient limits, which may lead to service interruptions and degraded performance for legitimate users.

References