Name: CVE-2018-7033: Improper Neutralization of Special Elements used in an SQL Command
Creator: Rapid7
Published: 2018-03-15T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-7033, CWE-89, CVSS 9.8, EPSS 0.00373

SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD.

CVSS Details

CVSS 3.1 Base Score: 9.8
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade slurm-llnl	Jul 25, 2018	Mar 15, 2018
Freebsd	—	Upgrade slurm-wlm	Mar 20, 2018	Mar 17, 2018
Suse	—	Upgrade perl-slurmUpgrade slurm_20_02-torqueUpgrade slurm-slurmdb-directUpgrade slurm_20_11-sqlUpgrade slurm_18_08-torqueUpgrade slurm_20_11-mungeUpgrade libnss_slurm2_20_02Upgrade slurm_20_11-pam_slurmUpgrade libslurm36Upgrade slurm_20_11-pluginsUpgrade libslurm33Upgrade slurm_20_11-luaUpgrade slurm-slurmdbdUpgrade perl-slurm_20_11Upgrade slurm-mungeUpgrade pdsh-slurm_20_11Upgrade slurm_20_02-sqlUpgrade slurm_20_11Upgrade slurm_18_08-pam_slurmUpgrade pdsh-slurm_18_08Upgrade slurm-sqlUpgrade slurm-develUpgrade slurm_18_08Upgrade slurm_18_08-sqlUpgrade slurm_18_08-slurmdbdUpgrade slurm_20_02-nodeUpgrade slurm_20_11-configUpgrade slurm_20_11-sviewUpgrade slurm-pluginsUpgrade perl-slurm_20_02Upgrade perl-slurm_18_08Upgrade slurm-pam_slurmUpgrade slurm_18_08-mungeUpgrade pdsh-netgroupUpgrade libslurm31Upgrade slurm_20_02-sviewUpgrade slurm_20_11-docUpgrade slurm_20_02-slurmdbdUpgrade slurm-sched-wikiUpgrade slurm_18_08-develUpgrade slurm-torqueUpgrade slurm_20_11-config-manUpgrade slurm_20_02-luaUpgrade slurm_20_11-develUpgrade slurm-auth-noneUpgrade slurm_18_08-auth-noneUpgrade pdsh-machinesUpgrade pdsh-dshgroupUpgrade libslurm35Upgrade slurm_18_08-docUpgrade slurm_20_02-pluginsUpgrade slurm_20_02-auth-noneUpgrade slurm-docUpgrade pdsh-gendersUpgrade slurm_18_08-configUpgrade slurm_20_02-configUpgrade slurm_20_02-mungeUpgrade pdshUpgrade libpmi0_18_08Upgrade pdsh-slurm_20_02Upgrade libnss_slurm2_20_11Upgrade slurm_20_11-webdocUpgrade libpmi0Upgrade libpmi0_20_11Upgrade slurm_20_11-auth-noneUpgrade slurm_20_02-pam_slurmUpgrade slurm_18_08-luaUpgrade slurm_20_02-develUpgrade slurm_18_08-nodeUpgrade slurmUpgrade slurm-luaUpgrade slurm_20_02-config-manUpgrade slurm_20_11-torqueUpgrade pdsh-slurmUpgrade slurm_20_11-slurmdbdUpgrade slurm_18_08-pluginsUpgrade slurm_20_11-nodeUpgrade libpmi0_20_02Upgrade slurm_20_02-docUpgrade slurm_20_02	Jun 1, 2021	Mar 15, 2018
Ubuntu	—	Upgrade slurmdbd (Ubuntu Pro)Upgrade slurm-client-emulator (Ubuntu Pro)Upgrade sview (Ubuntu Pro)Upgrade libslurm29 (Ubuntu Pro)Upgrade libslurmdb32 (Ubuntu Pro)Upgrade slurm-client (Ubuntu Pro)Upgrade slurmctld (Ubuntu Pro)Upgrade libslurm26 (Ubuntu Pro)Upgrade libslurmdb26 (Ubuntu Pro)Upgrade libslurmdb29 (Ubuntu Pro)Upgrade libslurm34 (Ubuntu Pro)Upgrade slurm-wlm-basic-plugins (Ubuntu Pro)Upgrade slurm-llnl (Ubuntu Pro)Upgrade slurm-wlm-emulator (Ubuntu Pro)Upgrade slurmd (Ubuntu Pro)Upgrade libslurm32 (Ubuntu Pro)	Mar 22, 2023	Mar 15, 2018

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence