Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade slurm-llnlUpgrade slurm-wlm | Jan 29, 2021 | Nov 27, 2020 |
| Suse | — | Upgrade libpmi0Upgrade slurm-webdocUpgrade pdsh-netgroupUpgrade slurm-restUpgrade libnss_slurm2_20_02Upgrade slurm-crayUpgrade slurm_20_02-pam_slurmUpgrade slurm_20_11-pam_slurmUpgrade slurm-sviewUpgrade slurm-hdf5Upgrade slurm_20_02-slurmdbdUpgrade slurm_18_08-pam_slurmUpgrade libslurm36Upgrade slurm_18_08-torqueUpgrade slurm_18_08-sqlUpgrade slurm_18_08Upgrade libslurm33Upgrade slurm_18_08-develUpgrade slurm-pluginsUpgrade pdsh-gendersUpgrade pdsh-slurm_20_11Upgrade slurm_20_02-luaUpgrade slurm_20_02Upgrade perl-slurm_20_11Upgrade slurm_20_02-torqueUpgrade slurm_20_11-sviewUpgrade slurm-openlavaUpgrade libpmi0_18_08Upgrade slurm_18_08-mungeUpgrade slurm_18_08-configUpgrade slurm_20_11Upgrade slurm_20_11-pluginsUpgrade slurm-configUpgrade slurm-seffUpgrade pdsh-slurmUpgrade slurm-sqlUpgrade slurm_20_11-auth-noneUpgrade pdsh-slurm_18_08Upgrade perl-slurm_18_08Upgrade slurm_18_08-docUpgrade perl-slurmUpgrade slurm_20_11-luaUpgrade slurm-develUpgrade perl-slurm_20_02Upgrade slurm_18_08-slurmdbdUpgrade slurm-torqueUpgrade slurm-config-manUpgrade slurm_20_02-configUpgrade slurm_18_08-nodeUpgrade libnss_slurm2Upgrade slurm-nodeUpgrade slurm_18_08-luaUpgrade slurm-docUpgrade slurm-sjstatUpgrade slurm_20_11-config-manUpgrade slurm_20_02-pluginsUpgrade slurm-luaUpgrade pdsh-dshgroupUpgrade pdsh-slurm_20_02Upgrade slurm_20_02-auth-noneUpgrade slurm-mungeUpgrade slurm_20_02-nodeUpgrade slurm_20_11-webdocUpgrade slurm_18_08-pluginsUpgrade libnss_slurm2_20_11Upgrade slurm_20_02-mungeUpgrade slurm_20_11-develUpgrade slurm_20_02-sqlUpgrade slurmUpgrade pdsh-machinesUpgrade slurm_20_11-slurmdbdUpgrade slurm_20_02-sviewUpgrade slurm_18_08-auth-noneUpgrade libslurm35Upgrade slurm_20_11-nodeUpgrade libpmi0_20_02Upgrade slurm_20_11-mungeUpgrade slurm_20_02-docUpgrade slurm_20_11-torqueUpgrade slurm_20_11-configUpgrade slurm_20_11-docUpgrade slurm_20_02-config-manUpgrade slurm-pam_slurmUpgrade libpmi0_20_11Upgrade slurm_20_02-develUpgrade slurm-slurmdbdUpgrade slurm-auth-noneUpgrade slurm_20_11-sqlUpgrade pdsh | Nov 27, 2020 | Nov 24, 2020 |
| Ubuntu | — | Upgrade libslurmdb32 (Ubuntu Pro)Upgrade slurm-wlm-emulator (Ubuntu Pro)Upgrade libslurm26 (Ubuntu Pro)Upgrade libslurmdb26 (Ubuntu Pro)Upgrade slurm-client-emulator (Ubuntu Pro)Upgrade slurmdbd (Ubuntu Pro)Upgrade slurmd (Ubuntu Pro)Upgrade libslurmdb29 (Ubuntu Pro)Upgrade sview (Ubuntu Pro)Upgrade slurmctld (Ubuntu Pro)Upgrade libslurm34 (Ubuntu Pro)Upgrade slurm-llnl (Ubuntu Pro)Upgrade slurm-client (Ubuntu Pro)Upgrade libslurm29 (Ubuntu Pro)Upgrade slurm-wlm-basic-plugins (Ubuntu Pro)Upgrade libslurm32 (Ubuntu Pro) | Mar 22, 2023 | Nov 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub