SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade slurm-llnl | Jan 29, 2021 | Jan 13, 2020 |
| Suse | — | Upgrade slurm_18_08-slurmdbdUpgrade slurm-hdf5Upgrade pdsh-dshgroupUpgrade slurm-pluginsUpgrade slurm_20_11-pluginsUpgrade pdsh-slurm_20_11Upgrade slurm_20_11-torqueUpgrade slurm_20_11-pam_slurmUpgrade libpmi0_18_08Upgrade libslurm31Upgrade slurm_20_11-luaUpgrade slurm_20_02-sviewUpgrade slurm_18_08-configUpgrade libpmi0_20_11Upgrade slurm_20_11-configUpgrade libpmi0_20_02Upgrade slurm_20_02Upgrade slurm_20_11-docUpgrade slurm-sqlUpgrade slurm_20_02-torqueUpgrade libslurm33Upgrade slurm_20_11-auth-noneUpgrade perl-slurm_18_08Upgrade slurm-nodeUpgrade slurm-sviewUpgrade slurm_18_08Upgrade libnss_slurm2_20_02Upgrade slurm-config-manUpgrade pdsh-gendersUpgrade libnss_slurm2_20_11Upgrade slurm_18_08-pam_slurmUpgrade slurm_20_02-docUpgrade slurm_20_11-sviewUpgrade slurm_20_02-configUpgrade slurm_18_08-pluginsUpgrade slurm_20_11-develUpgrade slurm-mungeUpgrade perl-slurm_20_02Upgrade perl-slurm_20_11Upgrade slurm_20_02-slurmdbdUpgrade slurm-crayUpgrade slurm_20_02-pluginsUpgrade perl-slurmUpgrade slurm_18_08-mungeUpgrade slurm_20_11-sqlUpgrade slurm-develUpgrade slurm-sched-wikiUpgrade slurm_18_08-nodeUpgrade slurm_20_02-config-manUpgrade pdsh-netgroupUpgrade pdsh-slurm_18_08Upgrade slurm-slurmdbdUpgrade slurm_18_08-develUpgrade slurm_20_02-develUpgrade slurm_20_11-mungeUpgrade slurm-seffUpgrade slurm_20_02-mungeUpgrade slurm-webdocUpgrade slurm_20_11-slurmdbdUpgrade slurm-luaUpgrade slurmUpgrade slurm_20_02-auth-noneUpgrade pdsh-slurmUpgrade libslurm36Upgrade libslurm35Upgrade slurm-openlavaUpgrade slurm_20_02-sqlUpgrade slurm-pam_slurmUpgrade slurm_20_11Upgrade slurm_18_08-auth-noneUpgrade slurm_18_08-sqlUpgrade pdshUpgrade pdsh-slurm_20_02Upgrade slurm_20_11-config-manUpgrade slurm-slurmdb-directUpgrade slurm_20_02-nodeUpgrade slurm_18_08-torqueUpgrade slurm_20_11-webdocUpgrade slurm-docUpgrade libpmi0Upgrade slurm_20_02-pam_slurmUpgrade slurm_18_08-docUpgrade slurm-sjstatUpgrade slurm-torqueUpgrade slurm_20_11-nodeUpgrade pdsh-machinesUpgrade slurm-configUpgrade slurm_18_08-luaUpgrade slurm-auth-noneUpgrade slurm_20_02-lua | Jan 22, 2020 | Jan 13, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 13, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub