Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade slurm-llnlUpgrade slurm-wlm | Jan 29, 2021 | Nov 27, 2020 |
| Suse | — | Upgrade libnss_slurm2Upgrade slurm-config-manUpgrade slurm_20_11-configUpgrade slurm_20_11-nodeUpgrade slurm_20_02-pluginsUpgrade slurm_20_11-webdocUpgrade slurm_20_11-torqueUpgrade pdshUpgrade slurm_18_08-luaUpgrade slurm-mungeUpgrade slurm_20_02-sviewUpgrade pdsh-dshgroupUpgrade slurm-openlavaUpgrade slurm_20_11-config-manUpgrade pdsh-slurm_18_08Upgrade slurm_20_02-config-manUpgrade slurm_20_02-pam_slurmUpgrade slurm_20_11-mungeUpgrade libpmi0_20_11Upgrade slurm_20_02-develUpgrade pdsh-slurm_20_02Upgrade slurm-auth-noneUpgrade slurm_20_11-sqlUpgrade slurm_18_08-torqueUpgrade slurm-seffUpgrade libnss_slurm2_20_11Upgrade libslurm33Upgrade slurm-sjstatUpgrade slurm_18_08-configUpgrade slurm_18_08-pluginsUpgrade slurm_18_08-sqlUpgrade slurm_20_02-mungeUpgrade slurm_20_02-nodeUpgrade slurm_20_11-develUpgrade slurm_20_02-auth-noneUpgrade libpmi0_18_08Upgrade slurm-slurmdbdUpgrade slurm_20_02-docUpgrade slurm-pam_slurmUpgrade slurm_18_08-nodeUpgrade slurm_20_02-sqlUpgrade pdsh-machinesUpgrade slurm-docUpgrade slurm_18_08-auth-noneUpgrade slurm_20_11-docUpgrade slurm_18_08Upgrade slurm-develUpgrade slurm-configUpgrade pdsh-netgroupUpgrade pdsh-gendersUpgrade slurm_20_02-torqueUpgrade slurm_20_11Upgrade slurm_18_08-slurmdbdUpgrade slurm_20_11-pam_slurmUpgrade slurm-slurmdb-directUpgrade pdsh-slurm_20_11Upgrade slurm-webdocUpgrade slurm-crayUpgrade slurm_20_11-auth-noneUpgrade slurm_20_11-pluginsUpgrade perl-slurm_20_02Upgrade slurm-restUpgrade slurm-luaUpgrade slurm_20_02Upgrade perl-slurm_20_11Upgrade slurm_20_11-slurmdbdUpgrade libpmi0_20_02Upgrade libslurm31Upgrade slurm_20_11-sviewUpgrade slurm-nodeUpgrade slurmUpgrade slurm-sched-wikiUpgrade slurm_18_08-mungeUpgrade perl-slurm_18_08Upgrade slurm-sqlUpgrade slurm_20_02-slurmdbdUpgrade slurm-torqueUpgrade slurm_18_08-docUpgrade slurm_20_11-luaUpgrade slurm_20_02-configUpgrade slurm_20_02-luaUpgrade slurm_18_08-pam_slurmUpgrade slurm-pluginsUpgrade slurm-hdf5Upgrade slurm-sviewUpgrade libslurm35Upgrade libnss_slurm2_20_02Upgrade slurm_18_08-develUpgrade perl-slurmUpgrade pdsh-slurmUpgrade libslurm36Upgrade libpmi0 | Nov 27, 2020 | Nov 24, 2020 |
| Ubuntu | — | Upgrade libslurm34 (Ubuntu Pro)Upgrade slurm-client (Ubuntu Pro)Upgrade libslurmdb32 (Ubuntu Pro)Upgrade libslurm32 (Ubuntu Pro)Upgrade slurmd (Ubuntu Pro)Upgrade libslurmdb26 (Ubuntu Pro)Upgrade slurm-llnl (Ubuntu Pro)Upgrade slurmctld (Ubuntu Pro)Upgrade slurmdbd (Ubuntu Pro)Upgrade libslurm26 (Ubuntu Pro)Upgrade libslurm29 (Ubuntu Pro)Upgrade slurm-wlm-basic-plugins (Ubuntu Pro)Upgrade slurm-wlm-emulator (Ubuntu Pro)Upgrade slurm-client-emulator (Ubuntu Pro)Upgrade libslurmdb29 (Ubuntu Pro)Upgrade sview (Ubuntu Pro) | Mar 22, 2023 | Nov 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub