SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges and code execution.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade slurm-wlm | Nov 4, 2022 | May 5, 2022 |
| Suse | — | Upgrade slurm-pam_slurmUpgrade slurm-seffUpgrade slurm_20_02-sjstatUpgrade slurm_20_02-luaUpgrade libpmi0_20_02Upgrade slurm_20_11-webdocUpgrade slurm-slurmdb-directUpgrade slurm-openlavaUpgrade slurm-webdocUpgrade slurm_22_05-sjstatUpgrade slurm_22_05-config-manUpgrade slurm_22_05-pluginsUpgrade slurm_20_11Upgrade slurm_22_05-openlavaUpgrade slurm_22_05-docUpgrade slurm-configUpgrade slurm_20_02-seffUpgrade slurm_22_05-torqueUpgrade slurm_20_02-nodeUpgrade slurm_20_11-auth-noneUpgrade pdsh-slurm_20_02Upgrade slurm_20_02-configUpgrade slurm_18_08-openlavaUpgrade slurm_22_05-seffUpgrade slurm_18_08-webdocUpgrade slurm_20_11-mungeUpgrade slurm_20_02-develUpgrade slurm_20_02-auth-noneUpgrade slurm_20_11-nodeUpgrade slurm-auth-noneUpgrade slurmUpgrade pdsh-machinesUpgrade slurm_18_08-sjstatUpgrade slurm_18_08-crayUpgrade slurm_20_02-mungeUpgrade slurm_22_05-mungeUpgrade slurm_22_05-sviewUpgrade libpmi0_18_08Upgrade slurm_18_08-docUpgrade slurm_22_05-sqlUpgrade slurm_22_05-webdocUpgrade libslurm36Upgrade slurm_20_11-sviewUpgrade slurm_18_08-configUpgrade slurm_18_08-hdf5Upgrade slurm_22_05-slurmdbdUpgrade libnss_slurm2Upgrade slurm_20_02-restUpgrade libnss_slurm2_22_05Upgrade slurm_20_02-sqlUpgrade slurm_22_05-hdf5Upgrade slurm-torqueUpgrade libpmi0Upgrade libslurm33Upgrade slurm_20_02Upgrade pdsh-gendersUpgrade libslurm38Upgrade slurm_20_02-pam_slurmUpgrade pdsh-slurmUpgrade slurm_20_11-config-manUpgrade slurm_20_11-restUpgrade slurm_18_08-torqueUpgrade slurm_20_02-openlavaUpgrade slurm_22_05-crayUpgrade pdsh-slurm_18_08Upgrade pdshUpgrade slurm_18_08-auth-noneUpgrade slurm_18_08-luaUpgrade slurm_20_11-sjstatUpgrade slurm_20_02-hdf5Upgrade slurm_20_11-pam_slurmUpgrade perl-slurm_20_02Upgrade pdsh-slurm_22_05Upgrade libpmi0_22_05Upgrade slurm_20_11-torqueUpgrade libslurm35Upgrade slurm_18_08-sqlUpgrade slurm_20_11-crayUpgrade slurm_22_05-nodeUpgrade slurm_18_08-slurmdbdUpgrade slurm_18_08Upgrade perl-slurmUpgrade slurm-restUpgrade slurm-nodeUpgrade slurm-luaUpgrade slurm-develUpgrade libpmi0_20_11Upgrade slurm_20_11-develUpgrade slurm-sjstatUpgrade slurm-config-manUpgrade slurm_22_05-auth-noneUpgrade slurm_22_05-luaUpgrade slurm_20_11-hdf5Upgrade slurm_20_11-configUpgrade slurm_20_02-webdocUpgrade slurm_18_08-mungeUpgrade slurm-sviewUpgrade slurm_18_08-config-manUpgrade libnss_slurm2_20_11Upgrade slurm_22_05-develUpgrade slurm-crayUpgrade slurm_22_05-configUpgrade slurm_20_11-luaUpgrade slurm_20_02-config-manUpgrade slurm_18_08-seffUpgrade libslurm31Upgrade libslurm32Upgrade slurm_20_11-slurmdbdUpgrade perl-slurm_20_11Upgrade perl-slurm_22_05Upgrade pdsh-netgroupUpgrade slurm-slurmdbdUpgrade pdsh-dshgroupUpgrade slurm_18_08-pam_slurmUpgrade slurm_22_05Upgrade slurm_22_05-restUpgrade perl-slurm_18_08Upgrade slurm_20_11-pluginsUpgrade slurm-docUpgrade slurm_20_11-sqlUpgrade slurm_20_02-slurmdbdUpgrade slurm-mungeUpgrade slurm_18_08-nodeUpgrade slurm_20_11-seffUpgrade slurm_20_02-docUpgrade slurm_20_02-crayUpgrade slurm-pluginsUpgrade pdsh-slurm_20_11Upgrade libnss_slurm2_20_02Upgrade slurm_22_05-testsuiteUpgrade slurm_18_08-sviewUpgrade slurm_20_02-pluginsUpgrade slurm_20_11-docUpgrade slurm_18_08-develUpgrade slurm_20_02-torqueUpgrade slurm_20_11-openlavaUpgrade slurm-sqlUpgrade slurm-sched-wikiUpgrade slurm_20_02-sviewUpgrade slurm-hdf5Upgrade slurm_18_08-pluginsUpgrade slurm_22_05-pam_slurm | Oct 26, 2022 | May 5, 2022 |
| Ubuntu | — | Upgrade libslurm26 (Ubuntu Pro)Upgrade libslurm37 (Ubuntu Pro)Upgrade libpmi2-0 (Ubuntu Pro)Upgrade libslurmdb32 (Ubuntu Pro)Upgrade slurm-client (Ubuntu Pro)Upgrade slurm-wlm-basic-plugins (Ubuntu Pro)Upgrade libslurm-perl (Ubuntu Pro)Upgrade libslurmdb26 (Ubuntu Pro)Upgrade libslurm34 (Ubuntu Pro)Upgrade libslurm32 (Ubuntu Pro)Upgrade slurmd (Ubuntu Pro)Upgrade libslurmdb-perl (Ubuntu Pro)Upgrade slurmctld (Ubuntu Pro)Upgrade slurmrestd (Ubuntu Pro)Upgrade slurmdbd (Ubuntu Pro)Upgrade slurm-wlm (Ubuntu Pro)Upgrade libslurmdb29 (Ubuntu Pro)Upgrade libpmi0 (Ubuntu Pro)Upgrade libpam-slurm (Ubuntu Pro)Upgrade libslurm29 (Ubuntu Pro)Upgrade slurm-llnl (Ubuntu Pro) | Nov 1, 2023 | May 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub