Name: CVE-2021-31215: Undefined Security Weakness
Creator: Rapid7
Published: 2021-05-13T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-31215, CVSS 8.8, EPSS 0.02536

SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling.

CVSS Details

CVSS 3.1 Base Score: 8.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade slurm-wlm	Jan 19, 2022	May 13, 2021
Suse	—	Upgrade slurm-mungeUpgrade slurm-sjstatUpgrade slurm_18_08-develUpgrade slurm_18_08-pluginsUpgrade slurm_20_11-develUpgrade slurm_20_11-mungeUpgrade slurm_20_11-config-manUpgrade slurm_20_11-torqueUpgrade perl-slurm_20_02Upgrade slurm_18_08-mungeUpgrade slurm_20_11-luaUpgrade slurm_18_08-pam_slurmUpgrade libnss_slurm2_20_11Upgrade slurm-develUpgrade slurm-luaUpgrade slurm_20_02-pluginsUpgrade slurm_18_08-slurmdbdUpgrade slurm-restUpgrade slurm_20_11-pam_slurmUpgrade slurm_20_02-nodeUpgrade slurm-hdf5Upgrade slurm-sched-wikiUpgrade slurm_20_11-configUpgrade slurm_18_08Upgrade slurm_20_11-docUpgrade slurm-sviewUpgrade slurm_20_02-slurmdbdUpgrade slurm_20_11-slurmdbdUpgrade libpmi0_20_11Upgrade slurm_20_11-sqlUpgrade slurm_20_11-pluginsUpgrade slurm-crayUpgrade slurm-seffUpgrade perl-slurmUpgrade slurm-nodeUpgrade perl-slurm_20_11Upgrade slurm_18_08-sqlUpgrade slurm_20_02-sviewUpgrade libslurm31Upgrade slurm-docUpgrade slurm-pam_slurmUpgrade libslurm35Upgrade slurm-pluginsUpgrade slurm_18_08-torqueUpgrade perl-slurm_18_08Upgrade slurm-slurmdbdUpgrade libnss_slurm2_20_02Upgrade slurm_20_02-torqueUpgrade slurm-configUpgrade slurm-config-manUpgrade slurm-sqlUpgrade slurm_20_02-auth-noneUpgrade slurm-openlavaUpgrade libpmi0Upgrade slurm_20_02-configUpgrade slurm_20_11-sviewUpgrade slurm_20_02Upgrade slurm_18_08-auth-noneUpgrade slurm_20_02-docUpgrade libpmi0_20_02Upgrade slurm_20_02-pam_slurmUpgrade slurm_18_08-docUpgrade slurm_20_11-auth-noneUpgrade slurm-webdocUpgrade slurm_20_11Upgrade slurm_18_08-luaUpgrade slurm_20_11-webdocUpgrade slurm-auth-noneUpgrade slurm_20_02-develUpgrade slurm_20_02-config-manUpgrade slurm_20_02-sqlUpgrade libnss_slurm2Upgrade slurm-slurmdb-directUpgrade libslurm33Upgrade slurm_20_11-nodeUpgrade libslurm36Upgrade slurm-torqueUpgrade slurm_20_02-mungeUpgrade slurm_20_02-luaUpgrade slurmUpgrade slurm_18_08-configUpgrade libpmi0_18_08Upgrade slurm_18_08-node	Jun 1, 2021	May 13, 2021
Ubuntu	—	Upgrade libslurm34 (Ubuntu Pro)Upgrade slurm-wlm-emulator (Ubuntu Pro)Upgrade slurmctld (Ubuntu Pro)Upgrade sview (Ubuntu Pro)Upgrade libslurm26 (Ubuntu Pro)Upgrade slurm-client-emulator (Ubuntu Pro)Upgrade libslurmdb26 (Ubuntu Pro)Upgrade slurm-llnl (Ubuntu Pro)Upgrade libslurmdb32 (Ubuntu Pro)Upgrade slurmdbd (Ubuntu Pro)Upgrade slurmd (Ubuntu Pro)Upgrade libslurm29 (Ubuntu Pro)Upgrade libslurm32 (Ubuntu Pro)Upgrade libslurmdb29 (Ubuntu Pro)Upgrade slurm-client (Ubuntu Pro)Upgrade slurm-wlm-basic-plugins (Ubuntu Pro)	Mar 22, 2023	May 13, 2021

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence