7.5

CVE-2023-32186: suse rancher_rke2

CVSS: 7.5v3.1HighModified
AliasesGHSA-p45j-vfv5-wprq
Published 19-09-2023Last modified 25-09-2024
Open JSON

Vulnerability summary

CVE-2023-32186 is a high (CVSS 7.5) vulnerability in suse rancher_rke2. EPSS estimates a 0.70% chance of exploitation in the next 30 days, higher than 52.3% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
0.70%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 19-09-2023
    PublishedVulnerability first disclosed.
  2. 25-09-2024
    Last modifiedVulnerability information updated.

Description

A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s servers apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects RKE2: from 1.24.0 before 1.24.17+rke2r1, from v1.25.0 before v1.25.13+rke2r1, from v1.26.0 before v1.26.8+rke2r1, from v1.27.0 before v1.27.5+rke2r1, from v1.28.0 before v1.28.1+rke2r1.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.70%

Chance of exploitation in the next 30 days

Percentile

52%

Versus all other CVEs

30-day change

+0.01 pp

From 0.69% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.70%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse2 products
  • rancher_rke2≥ 1.24.0\+rke2r1, < 1.24.17\+rke2r1 | ≥ 1.25.0\+rke2r1, < 1.25.13\+rke2r1 | ≥ 1.26.0\+rke2r1, < 1.26.8\+rke2r1 | ≥ 1.27.1\+rke2r1, < 1.27.5\+rke2r1 | 1.28.1\+rke2r1:rc1 | 1.28.1\+rke2r1:rc2
  • rke2≥ 1.24.0, < 1.24.17+rke2r1 | ≥ v1.25.0, < v1.25.13+rke2r1 | ≥ v1.26.0, < v1.26.8+rke2r1 | ≥ v1.27.0, < v1.27.5+rke2r1 | ≥ v1.28.0, < v1.28.1+rke2r1
Github.com/rancher1 product
  • rke2< 1.24.17 | ≥ 1.25.0, < 1.25.13 | ≥ 1.26.0, < 1.26.8 | ≥ 1.27.0, < 1.27.5 | ≥ 1.28.0, < 1.28.1

2 vendors · 3 products

References

4 links