Bug 1214792 (CVE-2023-32186)

Summary:	CVE-2023-32186: RKE2: Unauthenticated denial of service attack in RKE2 in the dynamiclistener
Product:	[Novell Products] SUSE Security Incidents	Reporter:	Guilherme Macedo <guilherme.macedo>
Component:	Incidents	Assignee:	Security Team bot <security-team>
Status:	NEW ---	QA Contact:	Security Team bot <security-team>
Severity:	Critical
Priority:	P5 - None	CC:	jsegitz, meissner
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	Other
URL:	https://github.com/rancherlabs/rancher-security/issues/578
Whiteboard:
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Comment 4 Guilherme Macedo 2023-09-09 17:53:12 UTC

The advisory is now public in https://github.com/rancher/rke2/security/advisories/GHSA-p45j-vfv5-wprq .

Comment 5 Johannes Segitz 2023-09-11 06:07:12 UTC

public