CVE-2023-32187
18.09.2023, 13:15
An Allocation of Resources Without Limits or Throttling vulnerability in SUSE k3s allows attackers with access to K3s servers' apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects k3s: from v1.24.0 before v1.24.17+k3s1, from v1.25.0 before v1.25.13+k3s1, from v1.26.0 before v1.26.8+k3s1, from sev1.27.0 before v1.27.5+k3s1, from v1.28.0 before v1.28.1+k3s1.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| k3s | k3s | 1.24.0 ≤ 𝑥 < 1.24.17\+k3s1 |
| k3s | k3s | 1.25.0 ≤ 𝑥 < 1.25.13\+k3s1 |
| k3s | k3s | 1.26.0 ≤ 𝑥 < 1.26.8\+k3s1 |
| k3s | k3s | 1.27.0 ≤ 𝑥 < 1.27.5\+k3s1 |
| k3s | k3s | 1.28.0 ≤ 𝑥 < 1.28.1\+k3s1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| k3s | k3s | 1.24.0 ≤ 𝑥 < 1.24.17+k3s1 | ADP |
| k3s | k3s | 1.25.0 ≤ 𝑥 < 1.25.13+k3s1 | ADP |
| k3s | k3s | 1.26.0 ≤ 𝑥 < 1.26.8+k3s1 | ADP |
| k3s | k3s | 1.28.0 ≤ 𝑥 < 1.28.1+k3s1 | ADP |
| k3s | k3s | 1.27.0 ≤ 𝑥 < 1.27.5+k3s1 | ADP |