CyberSecBulletin

K3s vulnerabilities

We track 1 vulnerability in K3s products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2023.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest K3s vulnerabilities

  • 7.5 High severity

    k3s: Allocation of Resources Without Limits or Throttling

    CVE-2023-32187SUSE

    An Allocation of Resources Without Limits or Throttling vulnerability in SUSE k3s allows attackers with access to K3s servers' apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects k3s: from v1.24.0 before v1.24.17+k3s1, from v1.25.0