An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade slurm-wlm | Feb 5, 2024 | Dec 14, 2023 |
| Freebsd | — | Upgrade slurm-wlm | Dec 20, 2023 | Dec 19, 2023 |
| Gentoo Linux | — | Upgrade sys-cluster/slurm. | Sep 23, 2024 | Dec 14, 2023 |
| Suse | — | Upgrade slurm_23_02-slurmdbdUpgrade slurm_20_11-mungeUpgrade slurm-pam_slurmUpgrade slurm_18_08-mungeUpgrade slurm_23_02-nodeUpgrade slurm-pluginsUpgrade slurm_20_02-openlavaUpgrade libpmi0_22_05Upgrade slurm_20_02-auth-noneUpgrade perl-slurm_18_08Upgrade slurm_22_05-torqueUpgrade slurm_20_11-configUpgrade slurm_22_05-sjstatUpgrade libslurm36Upgrade slurm-seffUpgrade slurm_20_02-nodeUpgrade slurm_20_11-torqueUpgrade slurm_23_02-develUpgrade slurm-develUpgrade slurm-sched-wikiUpgrade slurm-slurmdb-directUpgrade slurm-slurmdbdUpgrade slurm_20_02-pluginsUpgrade slurm_22_05-pam_slurmUpgrade slurm_22_05-restUpgrade slurm_20_02-mungeUpgrade slurm_18_08-sqlUpgrade slurm_18_08-torqueUpgrade slurm_20_02-docUpgrade slurm-nodeUpgrade slurm-sjstatUpgrade slurm-hdf5Upgrade libnss_slurm2_20_11Upgrade slurm_20_11-nodeUpgrade slurm_22_05-slurmdbdUpgrade slurm-torqueUpgrade slurm_22_05-webdocUpgrade slurm_20_11-webdocUpgrade libslurm33Upgrade slurm-auth-noneUpgrade slurm_20_02-restUpgrade slurm_20_02-sqlUpgrade perl-slurm_22_05Upgrade perl-slurmUpgrade slurm_23_02-sviewUpgrade slurm_20_11-openlavaUpgrade slurm-config-manUpgrade slurm_20_02-sjstatUpgrade slurm-sviewUpgrade slurm_22_05-configUpgrade slurm_18_08-luaUpgrade slurm-plugin-ext-sensors-rrdUpgrade slurm_18_08Upgrade libslurm39Upgrade slurm_22_05-luaUpgrade slurm_23_02-config-manUpgrade slurm_22_05-mungeUpgrade slurm_23_02-docUpgrade slurm_22_05-pluginsUpgrade slurm_23_02-pluginsUpgrade slurm_23_02-sqlUpgrade slurm_23_02Upgrade slurm_20_11-config-manUpgrade slurm_18_08-pluginsUpgrade slurm_18_08-configUpgrade slurm_20_11-pam_slurmUpgrade slurm_23_02-configUpgrade libnss_slurm2Upgrade libnss_slurm2_23_02Upgrade slurm_23_02-torqueUpgrade slurm_20_11-sjstatUpgrade slurm_22_05-openlavaUpgrade slurm_20_11-sqlUpgrade libpmi0_20_11Upgrade slurm_20_11-hdf5Upgrade slurm_20_02-testsuiteUpgrade slurm_18_08-slurmdbdUpgrade slurm_18_08-docUpgrade slurm_20_02-crayUpgrade slurm_20_11-luaUpgrade slurm_20_02-develUpgrade slurm_18_08-auth-noneUpgrade slurm-testsuiteUpgrade libnss_slurm2_22_05Upgrade libnss_slurm2_20_02Upgrade slurm-sqlUpgrade slurm_20_11Upgrade slurm_20_02-webdocUpgrade libpmi0_18_08Upgrade perl-slurm_20_02Upgrade slurm_20_11-crayUpgrade slurm-docUpgrade slurm_20_11-slurmdbdUpgrade libslurm31Upgrade slurm-configUpgrade slurm_18_08-nodeUpgrade slurm-luaUpgrade slurm_23_02-plugin-ext-sensors-rrdUpgrade slurm_22_05-sviewUpgrade slurm_22_05-sqlUpgrade slurm_22_05-develUpgrade slurm_20_11-restUpgrade slurm-crayUpgrade slurm-restUpgrade slurm_20_02-configUpgrade slurm_20_02-config-manUpgrade slurm-openlavaUpgrade libslurm35Upgrade slurm_22_05-testsuiteUpgrade slurm_22_05-docUpgrade slurm_22_05-config-manUpgrade slurm_20_02Upgrade perl-slurm_20_11Upgrade slurm_20_11-seffUpgrade slurm_18_08-develUpgrade slurm_20_02-torqueUpgrade libpmi0_20_02Upgrade slurm_23_02-crayUpgrade slurm_22_05-nodeUpgrade slurm_18_08-pam_slurmUpgrade slurm_20_02-hdf5Upgrade slurm-webdocUpgrade slurm_20_02-sviewUpgrade slurm_20_11-docUpgrade slurm_22_05-seffUpgrade slurm_22_05-crayUpgrade slurm-mungeUpgrade slurm_22_05Upgrade slurm_23_02-webdocUpgrade slurm_23_02-pam_slurmUpgrade slurm_20_11-sviewUpgrade slurm_20_11-develUpgrade slurm_20_02-slurmdbdUpgrade slurm_20_02-luaUpgrade slurmUpgrade libslurm38Upgrade perl-slurm_23_02Upgrade libpmi0Upgrade slurm_22_05-hdf5Upgrade slurm_23_02-auth-noneUpgrade libpmi0_23_02Upgrade slurm_23_02-luaUpgrade slurm_20_11-pluginsUpgrade slurm_23_02-mungeUpgrade slurm_22_05-auth-noneUpgrade slurm_20_11-auth-noneUpgrade slurm_20_02-seffUpgrade slurm_20_02-pam_slurm | Feb 1, 2024 | Dec 14, 2023 |
| Ubuntu | — | Upgrade libslurm-dev (Ubuntu Pro)Upgrade libpam-slurm-dev (Ubuntu Pro)Upgrade libpam-slurm (Ubuntu Pro)Upgrade slurm-wlm (Ubuntu Pro)Upgrade slurmd (Ubuntu Pro)Upgrade slurmctld (Ubuntu Pro) | May 7, 2026 | Dec 14, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub