Suse Rancher Rke2 vulnerabilities

2 known vulnerabilities affecting suse/rancher_rke2.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-32186HIGHCVSS 7.5≥ 1.24.0\+rke2r1, < 1.24.17\+rke2r1≥ 1.25.0\+rke2r1, < 1.25.13\+rke2r1+3 more2023-09-19

CVE-2023-32186 [HIGH] CWE-770 CVE-2023-32186: A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s servers apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects RKE2: from 1.24.0 before 1.24.17+rke2r1, from v1.25.0 before v1.25.13+rke2r1, from v1.26.0 before v1.26.8+rke2r1, from v1.27.0 before v1.27.5+rke2r

CVE-2021-32001MEDIUMCVSS 6.5v1.19.12v1.20.8+1 more2021-07-28

CVE-2021-32001 [MEDIUM] CWE-311 CVE-2021-32001: K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore ba K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material (cluster certificate authority private keys, secrets encryption configuration passphrase, etc.) and decrypt it, without having to know the token value. This issue affects: SUSE Rancher K3s ve