Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-32187

An Allocation of Resources Without Limits or Throttling vulnerability in SUSE k3s allows attackers with access to K3s servers' apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects k3s: from v1.24.0 before v1.24.17+k3s1, from v1.25.0 before v1.25.13+k3s1, from v1.26.0 before v1.26.8+k3s1, from sev1.27.0 before v1.27.5+k3s1, from v1.28.0 before v1.28.1+k3s1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.8%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2023-32187
  • K3s » K3s » Version: 1.24.0
    cpe:2.3:a:k3s:k3s:1.24.0
  • K3s » K3s » Version: 1.25.0
    cpe:2.3:a:k3s:k3s:1.25.0
  • K3s » K3s » Version: 1.26.0
    cpe:2.3:a:k3s:k3s:1.26.0
  • K3s » K3s » Version: 1.27.0
    cpe:2.3:a:k3s:k3s:1.27.0
  • K3s » K3s » Version: 1.28.0
    cpe:2.3:a:k3s:k3s:1.28.0


Contact Us

Shodan ® - All rights reserved