An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade slurm-wlm | Feb 5, 2024 | Dec 14, 2023 |
| Freebsd | — | Upgrade slurm-wlm | Dec 20, 2023 | Dec 19, 2023 |
| Gentoo Linux | — | Upgrade sys-cluster/slurm. | Sep 23, 2024 | Dec 14, 2023 |
| Suse | — | Upgrade slurm_22_05-crayUpgrade slurm_22_05-develUpgrade slurm-luaUpgrade slurm-docUpgrade slurm_22_05-sviewUpgrade perl-slurm_20_02Upgrade libpmi0_18_08Upgrade slurm-restUpgrade slurm_18_08-nodeUpgrade perl-slurm_20_11Upgrade slurm_20_02-webdocUpgrade slurm_18_08-docUpgrade slurm-sqlUpgrade slurm_20_11-pluginsUpgrade slurm_18_08-develUpgrade slurm_20_11-restUpgrade slurm_18_08-pam_slurmUpgrade slurm_22_05-config-manUpgrade slurm_20_11-luaUpgrade slurm_22_05-docUpgrade slurm_22_05-seffUpgrade slurm_20_02-sviewUpgrade slurm_23_02-auth-noneUpgrade slurm_23_02-luaUpgrade slurm_20_11-docUpgrade slurm_20_02Upgrade slurm_22_05-sqlUpgrade slurm_23_02-plugin-ext-sensors-rrdUpgrade slurm-crayUpgrade slurm_20_02-crayUpgrade slurm_22_05Upgrade slurm_23_02-pam_slurmUpgrade slurm_20_11-sviewUpgrade libnss_slurm2_20_02Upgrade slurmUpgrade slurm_20_02-luaUpgrade slurm_20_02-slurmdbdUpgrade slurm_20_02-pam_slurmUpgrade slurm_20_11-develUpgrade slurm_23_02-webdocUpgrade slurm-mungeUpgrade libslurm38Upgrade perl-slurm_23_02Upgrade libnss_slurm2_22_05Upgrade slurm_20_02-seffUpgrade slurm_22_05-hdf5Upgrade slurm-configUpgrade libslurm31Upgrade libpmi0_23_02Upgrade libpmi0Upgrade slurm_23_02-mungeUpgrade slurm_20_02-torqueUpgrade slurm_22_05-testsuiteUpgrade slurm_20_02-develUpgrade slurm_18_08-auth-noneUpgrade slurm_20_11-auth-noneUpgrade slurm-testsuiteUpgrade libslurm35Upgrade slurm_23_02-crayUpgrade slurm_22_05-auth-noneUpgrade slurm_20_11Upgrade slurm_20_02-configUpgrade slurm_20_11-crayUpgrade slurm_18_08-slurmdbdUpgrade slurm_20_11-seffUpgrade slurm_20_02-hdf5Upgrade slurm_20_02-config-manUpgrade slurm-openlavaUpgrade slurm_20_11-slurmdbdUpgrade slurm-webdocUpgrade slurm_22_05-nodeUpgrade libpmi0_20_02Upgrade slurm-sched-wikiUpgrade slurm_20_11-openlavaUpgrade slurm-hdf5Upgrade slurm_22_05-torqueUpgrade slurm_23_02-docUpgrade slurm_22_05-mungeUpgrade slurm_23_02-config-manUpgrade slurm-auth-noneUpgrade libnss_slurm2Upgrade slurm_22_05-openlavaUpgrade slurm_20_11-hdf5Upgrade libnss_slurm2_20_11Upgrade libslurm33Upgrade slurm_23_02-nodeUpgrade slurm_23_02-torqueUpgrade slurm_20_11-pam_slurmUpgrade slurm_20_11-mungeUpgrade slurm_20_02-auth-noneUpgrade slurm_18_08-configUpgrade libpmi0_22_05Upgrade slurm_20_11-config-manUpgrade slurm_22_05-webdocUpgrade slurm_20_11-webdocUpgrade slurm_18_08-mungeUpgrade slurm-sjstatUpgrade slurm_23_02-sqlUpgrade slurm_22_05-restUpgrade slurm_22_05-pam_slurmUpgrade slurm_20_02-pluginsUpgrade slurm_20_02-mungeUpgrade slurm_18_08-torqueUpgrade slurm_18_08-sqlUpgrade libslurm39Upgrade slurm_23_02Upgrade libpmi0_20_11Upgrade slurm_20_02-testsuiteUpgrade slurm_20_02-docUpgrade slurm_20_02-sjstatUpgrade slurm-pluginsUpgrade slurm-pam_slurmUpgrade slurm_23_02-develUpgrade slurm-slurmdbdUpgrade slurm-slurmdb-directUpgrade slurm_20_02-openlavaUpgrade slurm_23_02-slurmdbdUpgrade slurm_22_05-configUpgrade perl-slurm_22_05Upgrade slurm_20_11-nodeUpgrade slurm_20_11-sqlUpgrade slurm_22_05-sjstatUpgrade slurm-develUpgrade libslurm36Upgrade slurm_20_11-torqueUpgrade slurm_20_11-configUpgrade slurm_20_02-nodeUpgrade slurm-seffUpgrade slurm_20_02-restUpgrade slurm-torqueUpgrade perl-slurmUpgrade slurm-nodeUpgrade slurm_23_02-configUpgrade libnss_slurm2_23_02Upgrade slurm_22_05-slurmdbdUpgrade slurm_23_02-sviewUpgrade slurm_20_11-sjstatUpgrade perl-slurm_18_08Upgrade slurm_20_02-sqlUpgrade slurm_18_08-pluginsUpgrade slurm_22_05-pluginsUpgrade slurm_22_05-luaUpgrade slurm_18_08-luaUpgrade slurm_18_08Upgrade slurm-sviewUpgrade slurm-plugin-ext-sensors-rrdUpgrade slurm-config-manUpgrade slurm_23_02-plugins | Feb 1, 2024 | Dec 14, 2023 |
| Ubuntu | — | Upgrade libpam-slurm (Ubuntu Pro)Upgrade slurm-wlm (Ubuntu Pro)Upgrade slurmd (Ubuntu Pro)Upgrade libslurm-dev (Ubuntu Pro)Upgrade libpam-slurm-dev (Ubuntu Pro)Upgrade slurmctld (Ubuntu Pro) | May 7, 2026 | Dec 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub