SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade slurm-llnl | Jan 29, 2021 | Jan 13, 2020 |
| Suse | — | Upgrade slurm-configUpgrade slurm-torqueUpgrade slurm-openlavaUpgrade slurm-luaUpgrade slurm_18_08-luaUpgrade libslurm36Upgrade libslurm35Upgrade libpmi0Upgrade slurm_20_02-mungeUpgrade slurm-slurmdb-directUpgrade slurm_20_02-pam_slurmUpgrade slurmUpgrade slurm-webdocUpgrade pdsh-slurmUpgrade slurm_20_02-auth-noneUpgrade slurm_18_08-docUpgrade slurm_20_11Upgrade slurm-seffUpgrade slurm_20_02-sqlUpgrade slurm_20_11-slurmdbdUpgrade slurm_20_02-nodeUpgrade slurm_20_02-develUpgrade slurm_20_02-luaUpgrade slurm_18_08-auth-noneUpgrade slurm_20_11-mungeUpgrade pdshUpgrade slurm_20_11-config-manUpgrade slurm-auth-noneUpgrade pdsh-machinesUpgrade slurm-pam_slurmUpgrade pdsh-slurm_20_02Upgrade slurm_18_08-sqlUpgrade slurm_20_11-nodeUpgrade slurm_20_11-webdocUpgrade slurm-sjstatUpgrade slurm-docUpgrade slurm_18_08-torqueUpgrade perl-slurm_20_11Upgrade libnss_slurm2_20_11Upgrade pdsh-netgroupUpgrade slurm_18_08-develUpgrade perl-slurm_20_02Upgrade pdsh-dshgroupUpgrade pdsh-slurm_20_11Upgrade slurm_20_11-pam_slurmUpgrade slurm-pluginsUpgrade slurm_20_11-torqueUpgrade slurm_20_11-luaUpgrade slurm-hdf5Upgrade slurm_18_08-mungeUpgrade slurm_20_11-pluginsUpgrade perl-slurmUpgrade slurm_20_11-auth-noneUpgrade slurm_20_11-docUpgrade slurm_18_08-pam_slurmUpgrade slurm_20_02-config-manUpgrade slurm-develUpgrade pdsh-slurm_18_08Upgrade slurm_18_08-nodeUpgrade slurm-sched-wikiUpgrade slurm_20_02-torqueUpgrade slurm_20_02-pluginsUpgrade slurm_20_02-docUpgrade slurm_20_02-configUpgrade libslurm31Upgrade slurm-config-manUpgrade slurm_20_02-sviewUpgrade slurm_18_08-pluginsUpgrade libpmi0_20_11Upgrade slurm_18_08Upgrade slurm-sviewUpgrade libslurm33Upgrade slurm_18_08-slurmdbdUpgrade libnss_slurm2_20_02Upgrade perl-slurm_18_08Upgrade slurm-sqlUpgrade slurm_20_02Upgrade slurm_20_11-develUpgrade libpmi0_20_02Upgrade slurm-mungeUpgrade slurm_18_08-configUpgrade slurm-slurmdbdUpgrade slurm_20_11-sqlUpgrade libpmi0_18_08Upgrade slurm_20_11-sviewUpgrade slurm-nodeUpgrade slurm_20_02-slurmdbdUpgrade slurm_20_11-configUpgrade slurm-crayUpgrade pdsh-genders | Jan 22, 2020 | Jan 13, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 13, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub