Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s servers apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects RKE2: from 1.24.0 before 1.24.17+rke2r1, from v1.25.0 before v1.25.13+rke2r1, from v1.26.0 before v1.26.8+rke2r1, from v1.27.0 before v1.27.5+rke2r1, from v1.28.0 before v1.28.1+rke2r1.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
不加限制或调节的资源分配
Vulnerability Title
RKE2 安全漏洞
Vulnerability Description
RKE2是Rancher 的下一代 Kubernetes 发行版。 SUSE RKE2存在安全漏洞，该漏洞源于存在资源分配错误问题。攻击者可利用该漏洞访问K3s服务器的apiserver/supervisor端口，导致拒绝服务。受影响的产品和版本：SUSE RKE2 1.24.17+rke2r1之前版本，v1.25.13+rke2r1之前版本， v1.26.8+rke2r1之前版本，v1.27.5+rke2r1之前版本， v1.28.1+rke2r1之前版本。
CVSS Information
N/A
Vulnerability Type
N/A