Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-32187

Date: September 18, 2023

An Allocation of Resources Without Limits or Throttling vulnerability in SUSE k3s allows attackers with access to K3s servers' apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects k3s: from v1.24.0 before v1.24.17+k3s1, from v1.25.0 before v1.25.13+k3s1, from v1.26.0 before v1.26.8+k3s1, from sev1.27.0 before v1.27.5+k3s1, from v1.28.0 before v1.28.1+k3s1.

Language: Go

Severity Score

Related Resources (6)

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32187https://
https://nvd.nist.gov/vuln/detail/CVE-2023-32187
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32187https:/
https://github.com/k3s-io/k3s
https://github.com/k3s-io/k3s/security/advisories/GHSA-m4hf-6vgr-75r2
https://www.mend.io/vulnerability-database/CVE-2023-32187

Severity Score

Weakness Type (CWE)

Allocation of Resources Without Limits or Throttling

CWE-770

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

Do you need more information?

Contact Us