Name: CVE-2022-29501: Undefined Security Weakness
Creator: Rapid7
Published: 2022-05-05T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-29501, CVSS 8.8, EPSS 0.02971

SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges and code execution.

CVSS Details

CVSS 3.1 Base Score: 8.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade slurm-wlm	Nov 4, 2022	May 5, 2022
Suse	—	Upgrade pdsh-dshgroupUpgrade slurm_20_11-configUpgrade slurm_20_11-torqueUpgrade slurm-sviewUpgrade slurm_18_08-config-manUpgrade slurm-develUpgrade libslurm31Upgrade slurm_18_08-seffUpgrade slurm_18_08Upgrade slurm_22_05-pam_slurmUpgrade slurm-pluginsUpgrade slurm_18_08-sqlUpgrade slurm_18_08-nodeUpgrade slurm_18_08-pam_slurmUpgrade slurm_20_11-luaUpgrade slurm-sqlUpgrade slurm_20_11-docUpgrade slurm_22_05-restUpgrade slurm_22_05-testsuiteUpgrade slurm-hdf5Upgrade slurm_20_02-hdf5Upgrade slurm_20_02-torqueUpgrade slurm_18_08-develUpgrade libslurm32Upgrade slurm-sjstatUpgrade slurm_22_05-nodeUpgrade libnss_slurm2_20_02Upgrade slurm_22_05-develUpgrade slurm-crayUpgrade slurm_20_02-config-manUpgrade perl-slurmUpgrade libpmi0_22_05Upgrade slurm_20_11-seffUpgrade slurm_18_08-slurmdbdUpgrade slurm_22_05-luaUpgrade slurm_20_11-openlavaUpgrade slurm_20_02-sviewUpgrade slurm_20_02-webdocUpgrade slurm-luaUpgrade slurm_20_11-pam_slurmUpgrade slurm_20_11-develUpgrade slurm-nodeUpgrade pdsh-slurm_22_05Upgrade perl-slurm_20_02Upgrade slurm-restUpgrade slurm_20_11-slurmdbdUpgrade slurm_18_08-pluginsUpgrade libpmi0_20_11Upgrade slurm_20_11-hdf5Upgrade slurm_20_11-crayUpgrade slurm_20_02-slurmdbdUpgrade slurm_20_02-crayUpgrade perl-slurm_20_11Upgrade slurm-slurmdbdUpgrade perl-slurm_22_05Upgrade slurm_22_05Upgrade slurm_22_05-auth-noneUpgrade libnss_slurm2_20_11Upgrade slurm_18_08-mungeUpgrade perl-slurm_18_08Upgrade slurm_20_02-pluginsUpgrade slurm_20_11-pluginsUpgrade slurm_20_02-docUpgrade slurm-config-manUpgrade slurm-sched-wikiUpgrade pdsh-netgroupUpgrade pdsh-slurm_20_11Upgrade libslurm35Upgrade slurm_22_05-configUpgrade slurm_20_11-sqlUpgrade slurm-mungeUpgrade slurm-docUpgrade slurm_18_08-sviewUpgrade pdshUpgrade slurm-configUpgrade libpmi0Upgrade slurm_22_05-mungeUpgrade libnss_slurm2Upgrade slurm_20_02-sjstatUpgrade slurm_20_11-mungeUpgrade slurm_22_05-sjstatUpgrade slurm_18_08-luaUpgrade slurm_18_08-docUpgrade slurm_20_02-openlavaUpgrade slurm_20_02-restUpgrade slurm_18_08-torqueUpgrade slurm-slurmdb-directUpgrade slurm_20_02Upgrade slurm_22_05-sqlUpgrade slurm_20_02-sqlUpgrade slurm_20_02-pam_slurmUpgrade pdsh-gendersUpgrade slurm_20_11-config-manUpgrade slurm-torqueUpgrade libslurm36Upgrade pdsh-slurmUpgrade slurm_22_05-webdocUpgrade slurm_22_05-hdf5Upgrade slurm_20_11-sviewUpgrade slurm_20_11-auth-noneUpgrade slurm_18_08-openlavaUpgrade slurm_20_11-nodeUpgrade slurm-webdocUpgrade slurm-pam_slurmUpgrade libpmi0_20_02Upgrade slurm_22_05-torqueUpgrade slurm_22_05-sviewUpgrade slurm_22_05-openlavaUpgrade slurm_22_05-seffUpgrade slurm_22_05-config-manUpgrade slurm_20_11Upgrade slurm_20_02-mungeUpgrade slurm_20_02-develUpgrade slurm_18_08-sjstatUpgrade slurm_18_08-crayUpgrade slurm-openlavaUpgrade libpmi0_18_08Upgrade slurm_22_05-slurmdbdUpgrade libnss_slurm2_22_05Upgrade slurm-auth-noneUpgrade slurm-seffUpgrade slurm_20_02-auth-noneUpgrade slurm_20_02-seffUpgrade pdsh-slurm_18_08Upgrade pdsh-machinesUpgrade pdsh-slurm_20_02Upgrade slurm_18_08-webdocUpgrade slurm_20_02-nodeUpgrade libslurm33Upgrade slurm_20_11-webdocUpgrade slurm_22_05-pluginsUpgrade slurmUpgrade slurm_20_11-restUpgrade slurm_20_11-sjstatUpgrade slurm_20_02-configUpgrade slurm_18_08-hdf5Upgrade slurm_18_08-configUpgrade slurm_22_05-docUpgrade slurm_20_02-luaUpgrade slurm_18_08-auth-noneUpgrade libslurm38Upgrade slurm_22_05-cray	Oct 26, 2022	May 5, 2022
Ubuntu	—	Upgrade libslurm-perl (Ubuntu Pro)Upgrade slurm-wlm-basic-plugins (Ubuntu Pro)Upgrade slurm-client (Ubuntu Pro)Upgrade libslurm26 (Ubuntu Pro)Upgrade libslurm32 (Ubuntu Pro)Upgrade libslurmdb26 (Ubuntu Pro)Upgrade libslurmdb-perl (Ubuntu Pro)Upgrade slurmrestd (Ubuntu Pro)Upgrade libslurm34 (Ubuntu Pro)Upgrade slurmctld (Ubuntu Pro)Upgrade libpmi2-0 (Ubuntu Pro)Upgrade libslurm37 (Ubuntu Pro)Upgrade libslurmdb32 (Ubuntu Pro)Upgrade slurmd (Ubuntu Pro)Upgrade libslurmdb29 (Ubuntu Pro)Upgrade libpam-slurm (Ubuntu Pro)Upgrade libpmi0 (Ubuntu Pro)Upgrade slurm-wlm (Ubuntu Pro)Upgrade slurmdbd (Ubuntu Pro)Upgrade slurm-llnl (Ubuntu Pro)Upgrade libslurm29 (Ubuntu Pro)	Nov 1, 2023	May 5, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence