CVE-2024-58259: DoS Flaw in Rancher Manager Allows Unauthenticated Attackers to Crash Servers

CVE-2024-58259 is a high-severity DoS flaw in Rancher Manager that could be exploited by both unauthenticated and authenticated attackers, with a CVSS score of 8.2. The issue stems from Rancher Manager not enforcing request body size limits on certain public and authenticated API endpoints, allowing malicious payloads to be fully loaded into memory during processing. According to the advisory, this enables attackers to flood vulnerable endpoints and disrupt Rancher’s availability across managed Kubernetes clusters.

The SUSE Rancher Security Team issued a mitigation, and according to the SUSE Knowledge Base article, this vulnerability is addressed by adding a default limit of 1MiB and a setting in case this value needs to be increased. Patched versions include Rancher v2.12.1, v2.11.5, v2.10.9, and v2.9.12, with a temporary mitigation path for those unable to upgrade.