SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade slurm-llnl | Jul 25, 2018 | Mar 15, 2018 |
| Freebsd | — | Upgrade slurm-wlm | Mar 20, 2018 | Mar 17, 2018 |
| Suse | — | Upgrade slurm_18_08Upgrade slurm_20_11-sqlUpgrade pdsh-netgroupUpgrade slurm_20_11-develUpgrade libslurm33Upgrade slurm_20_11-configUpgrade slurm_20_02-sviewUpgrade libslurm31Upgrade pdsh-slurm_20_11Upgrade perl-slurm_20_11Upgrade slurm_20_02-nodeUpgrade pdsh-slurm_18_08Upgrade libnss_slurm2_20_02Upgrade slurm_20_11-mungeUpgrade slurm-sched-wikiUpgrade slurm-pluginsUpgrade slurm_20_11-docUpgrade slurm_18_08-slurmdbdUpgrade slurm_20_11Upgrade slurm-slurmdb-directUpgrade slurm-torqueUpgrade slurm_20_02-sqlUpgrade slurm-mungeUpgrade slurm_20_11-pam_slurmUpgrade slurm_20_02-luaUpgrade slurm_20_11-luaUpgrade perl-slurmUpgrade slurm-sqlUpgrade perl-slurm_20_02Upgrade slurm_20_11-config-manUpgrade slurm_20_11-pluginsUpgrade slurm_18_08-pam_slurmUpgrade slurm_18_08-mungeUpgrade slurm_18_08-sqlUpgrade libslurm36Upgrade slurm_20_11-sviewUpgrade slurm-develUpgrade slurm-pam_slurmUpgrade slurm_20_02-torqueUpgrade slurm_20_02-slurmdbdUpgrade slurm-slurmdbdUpgrade perl-slurm_18_08Upgrade slurm_18_08-torqueUpgrade slurm_18_08-develUpgrade libpmi0Upgrade slurm_20_11-torqueUpgrade slurm_20_11-slurmdbdUpgrade pdsh-gendersUpgrade slurm-docUpgrade slurm_18_08-auth-noneUpgrade slurm_20_02Upgrade libpmi0_20_02Upgrade pdsh-dshgroupUpgrade pdsh-slurmUpgrade slurm_20_02-config-manUpgrade slurm_20_02-docUpgrade slurm_20_02-pluginsUpgrade pdsh-machinesUpgrade slurm_18_08-docUpgrade slurm_18_08-nodeUpgrade slurm-luaUpgrade slurm_18_08-pluginsUpgrade slurm_18_08-luaUpgrade libnss_slurm2_20_11Upgrade libpmi0_18_08Upgrade slurm_20_11-auth-noneUpgrade pdsh-slurm_20_02Upgrade pdshUpgrade slurm_20_02-configUpgrade slurm_20_02-pam_slurmUpgrade slurm_20_02-auth-noneUpgrade slurm_20_11-nodeUpgrade slurm-auth-noneUpgrade slurm_20_11-webdocUpgrade libslurm35Upgrade slurm_20_02-mungeUpgrade libpmi0_20_11Upgrade slurmUpgrade slurm_20_02-develUpgrade slurm_18_08-config | Jun 1, 2021 | Mar 15, 2018 |
| Ubuntu | — | Upgrade slurm-wlm-emulator (Ubuntu Pro)Upgrade libslurm32 (Ubuntu Pro)Upgrade libslurm34 (Ubuntu Pro)Upgrade slurm-llnl (Ubuntu Pro)Upgrade slurmd (Ubuntu Pro)Upgrade slurm-wlm-basic-plugins (Ubuntu Pro)Upgrade sview (Ubuntu Pro)Upgrade libslurm29 (Ubuntu Pro)Upgrade slurmdbd (Ubuntu Pro)Upgrade slurm-client-emulator (Ubuntu Pro)Upgrade libslurmdb29 (Ubuntu Pro)Upgrade slurm-client (Ubuntu Pro)Upgrade libslurmdb32 (Ubuntu Pro)Upgrade slurmctld (Ubuntu Pro)Upgrade libslurmdb26 (Ubuntu Pro)Upgrade libslurm26 (Ubuntu Pro) | Mar 22, 2023 | Mar 15, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub