High severity7.8NVD Advisory· Published Nov 1, 2017· Updated Jun 17, 2026
CVE-2017-15566
CVE-2017-15566
Description
Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16- osv-coords13 versionspkg:rpm/opensuse/slurm&distro=openSUSE%20Tumbleweedpkg:rpm/suse/pdsh&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012pkg:rpm/suse/pdsh&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015pkg:rpm/suse/pdsh&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP1pkg:rpm/suse/pdsh_slurm_18_08&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012pkg:rpm/suse/pdsh_slurm_20_02&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012pkg:rpm/suse/pdsh_slurm_20_11&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012pkg:rpm/suse/slurm_18_08&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012pkg:rpm/suse/slurm_18_08&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015pkg:rpm/suse/slurm_20_02&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012pkg:rpm/suse/slurm_20_11&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012pkg:rpm/suse/slurm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012pkg:rpm/suse/slurmlibs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012
< 21.08.1-1.1+ 12 more
- (no CPE)range: < 21.08.1-1.1
- (no CPE)range: < 2.33-7.5.17
- (no CPE)range: < 2.33-7.6.1
- (no CPE)range: < 2.33-7.6.1
- (no CPE)range: < 2.34-7.26.2
- (no CPE)range: < 2.34-7.26.2
- (no CPE)range: < 2.34-7.32.1
- (no CPE)range: < 18.08.9-3.5.1
- (no CPE)range: < 18.08.9-1.5.2
- (no CPE)range: < 20.02.3-3.5.1
- (no CPE)range: < 20.11.4-3.5.1
- (no CPE)range: < 17.02.9-6.10.1
- (no CPE)range: < 16.05.8.1-6.1
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/101675nvdThird Party AdvisoryVDB Entry
- www.debian.org/security/2017/dsa-4023nvdThird Party Advisory
- www.schedmd.com/news.phpnvdVendor Advisory
News mentions
0No linked articles in our index yet.