SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade slurm-llnl | Jul 25, 2018 | May 30, 2018 |
| Suse | — | Upgrade slurm_20_11-auth-noneUpgrade slurm_20_02-sqlUpgrade pdshUpgrade slurm_18_08-luaUpgrade slurm_20_02-configUpgrade slurm_18_08-auth-noneUpgrade slurm_20_02-pam_slurmUpgrade pdsh-machinesUpgrade slurm-openlavaUpgrade libpmi0Upgrade slurm-docUpgrade slurm_20_11-nodeUpgrade slurm_20_11-torqueUpgrade slurm-nodeUpgrade slurm_20_11-webdocUpgrade slurm-luaUpgrade slurm_20_11-slurmdbdUpgrade libnss_slurm2_20_11Upgrade slurm_20_02-mungeUpgrade slurm-sjstatUpgrade slurm_20_02-develUpgrade pdsh-slurm_20_02Upgrade libslurm35Upgrade slurm_20_11-configUpgrade slurm_20_02Upgrade slurm_20_11-develUpgrade slurm_20_02-auth-noneUpgrade pdsh-gendersUpgrade slurm_20_02-sviewUpgrade pdsh-dshgroupUpgrade slurm-auth-noneUpgrade libpmi0_20_02Upgrade slurm_20_11-sqlUpgrade slurm_20_02-pluginsUpgrade slurm-slurmdbdUpgrade slurmUpgrade libpmi0_20_11Upgrade slurm-configUpgrade slurm_18_08-pluginsUpgrade slurm_20_02-docUpgrade slurm_18_08-sqlUpgrade slurm_18_08-nodeUpgrade pdsh-netgroupUpgrade libslurm33Upgrade libslurm36Upgrade slurm-mungeUpgrade perl-slurmUpgrade libpmi0_18_08Upgrade slurm-slurmdb-directUpgrade slurm_20_11-pluginsUpgrade slurm-torqueUpgrade libslurm32Upgrade slurm_20_11Upgrade pdsh-slurmUpgrade slurm_18_08-mungeUpgrade slurm_20_11-sviewUpgrade pdsh-slurm_18_08Upgrade slurm-develUpgrade slurm_18_08-pam_slurmUpgrade slurm-sched-wikiUpgrade slurm_20_02-slurmdbdUpgrade slurm_20_02-nodeUpgrade slurm_18_08-configUpgrade slurm_18_08Upgrade slurm_20_11-config-manUpgrade slurm_20_11-mungeUpgrade slurm_20_11-luaUpgrade libnss_slurm2_20_02Upgrade perl-slurm_20_11Upgrade perl-slurm_20_02Upgrade libslurm31Upgrade slurm_20_02-config-manUpgrade slurm_20_11-docUpgrade slurm_18_08-torqueUpgrade slurm-sqlUpgrade pdsh-slurm_20_11Upgrade slurm-pam_slurmUpgrade slurm-sviewUpgrade slurm_18_08-docUpgrade slurm_18_08-develUpgrade slurm-pluginsUpgrade slurm_18_08-slurmdbdUpgrade slurm_20_02-luaUpgrade slurm_20_11-pam_slurmUpgrade perl-slurm_18_08Upgrade slurm_20_02-torqueUpgrade slurm-seff | Jul 17, 2018 | May 30, 2018 |
| Ubuntu | — | Upgrade slurmdbd (Ubuntu Pro)Upgrade slurm-client (Ubuntu Pro)Upgrade libslurmdb32 (Ubuntu Pro)Upgrade libslurm-perl (Ubuntu Pro)Upgrade slurm-llnl-slurmdbd (Ubuntu Pro)Upgrade slurm-llnl-torque (Ubuntu Pro)Upgrade slurmd (Ubuntu Pro)Upgrade libslurm32 (Ubuntu Pro)Upgrade slurm-wlm-emulator (Ubuntu Pro)Upgrade slurm-llnl-basic-plugins (Ubuntu Pro)Upgrade slurm-client-emulator (Ubuntu Pro)Upgrade slurm-llnl (Ubuntu Pro)Upgrade libslurm26 (Ubuntu Pro)Upgrade sview (Ubuntu Pro)Upgrade libslurmdb-perl (Ubuntu Pro)Upgrade slurm-llnl-sview (Ubuntu Pro)Upgrade slurmctld (Ubuntu Pro)Upgrade slurm-wlm-basic-plugins (Ubuntu Pro)Upgrade libpam-slurm (Ubuntu Pro)Upgrade libslurmdb26 (Ubuntu Pro)Upgrade libpmi0 (Ubuntu Pro) | Mar 22, 2023 | May 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub