Name: CVE-2020-27745: Buffer Copy without Checking Size of Input
Creator: Rapid7
Published: 2020-11-27T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-27745, CWE-120, CVSS 9.8, EPSS 0.01378

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.

CVSS Details

CVSS 3.1 Base Score: 9.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade slurm-llnlUpgrade slurm-wlm	Jan 29, 2021	Nov 27, 2020
Suse	—	Upgrade perl-slurmUpgrade slurm_18_08-develUpgrade slurm_20_02-slurmdbdUpgrade libpmi0Upgrade slurm-sqlUpgrade slurm_20_11-slurmdbdUpgrade libpmi0_20_02Upgrade perl-slurm_20_02Upgrade slurm-restUpgrade slurm_20_02Upgrade slurm-docUpgrade libslurm31Upgrade perl-slurm_20_11Upgrade slurm_18_08Upgrade slurm_18_08-auth-noneUpgrade slurm-luaUpgrade slurm-crayUpgrade slurm_20_11-docUpgrade libslurm36Upgrade slurm_20_11-auth-noneUpgrade slurm_20_11-sviewUpgrade slurm_20_11-pam_slurmUpgrade slurmUpgrade slurm-slurmdb-directUpgrade slurm-sched-wikiUpgrade slurm_20_11-luaUpgrade slurm_20_02-torqueUpgrade slurm_18_08-docUpgrade slurm-nodeUpgrade perl-slurm_18_08Upgrade pdsh-slurm_20_11Upgrade slurm_20_11Upgrade slurm-hdf5Upgrade slurm-configUpgrade slurm_20_02-configUpgrade libnss_slurm2_20_02Upgrade libslurm35Upgrade pdsh-gendersUpgrade slurm-pluginsUpgrade slurm-sviewUpgrade slurm_20_11-pluginsUpgrade slurm_18_08-pam_slurmUpgrade slurm-webdocUpgrade slurm_18_08-slurmdbdUpgrade slurm_20_02-luaUpgrade pdsh-netgroupUpgrade slurm-torqueUpgrade slurm_18_08-mungeUpgrade slurm-develUpgrade pdsh-slurmUpgrade slurm_20_02-sviewUpgrade slurm_20_11-webdocUpgrade slurm_20_11-config-manUpgrade pdshUpgrade slurm_18_08-sqlUpgrade slurm_20_11-torqueUpgrade slurm_20_02-mungeUpgrade slurm_18_08-configUpgrade slurm_20_11-nodeUpgrade slurm-config-manUpgrade slurm_20_02-config-manUpgrade slurm_20_11-mungeUpgrade slurm_18_08-torqueUpgrade pdsh-slurm_20_02Upgrade slurm-sjstatUpgrade slurm_20_11-configUpgrade slurm_20_02-sqlUpgrade libnss_slurm2Upgrade slurm_20_02-pluginsUpgrade slurm-slurmdbdUpgrade slurm_18_08-nodeUpgrade slurm_20_02-nodeUpgrade slurm_20_02-auth-noneUpgrade slurm-pam_slurmUpgrade slurm-seffUpgrade pdsh-machinesUpgrade libnss_slurm2_20_11Upgrade libpmi0_18_08Upgrade slurm_20_11-develUpgrade slurm_20_02-docUpgrade libslurm33Upgrade pdsh-dshgroupUpgrade slurm_20_02-develUpgrade pdsh-slurm_18_08Upgrade slurm-openlavaUpgrade libpmi0_20_11Upgrade slurm_18_08-luaUpgrade slurm_20_11-sqlUpgrade slurm_20_02-pam_slurmUpgrade slurm-auth-noneUpgrade slurm_18_08-pluginsUpgrade slurm-munge	Nov 27, 2020	Nov 24, 2020
Ubuntu	—	Upgrade libslurm26 (Ubuntu Pro)Upgrade libslurmdb26 (Ubuntu Pro)Upgrade libslurmdb29 (Ubuntu Pro)Upgrade slurm-llnl (Ubuntu Pro)Upgrade slurm-client-emulator (Ubuntu Pro)Upgrade sview (Ubuntu Pro)Upgrade slurmdbd (Ubuntu Pro)Upgrade libslurm29 (Ubuntu Pro)Upgrade slurm-wlm-emulator (Ubuntu Pro)Upgrade slurmctld (Ubuntu Pro)Upgrade slurm-wlm-basic-plugins (Ubuntu Pro)Upgrade libslurmdb32 (Ubuntu Pro)Upgrade libslurm34 (Ubuntu Pro)Upgrade slurm-client (Ubuntu Pro)Upgrade libslurm32 (Ubuntu Pro)Upgrade slurmd (Ubuntu Pro)	Mar 22, 2023	Nov 27, 2020

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence