CVE-2018-10995

Vulnerability

SchedMD Slurm versions prior to 17.02.11 and 17.11.x before 17.11.7 mishandle user name (user_name) and group ID (gid) fields in job requests [2]. This flaw resides in the job submission and processing logic, where the gid field is not securely validated, allowing an attacker to specify arbitrary group identifiers.

Exploitation

An attacker with the ability to submit jobs to a Slurm cluster can exploit this vulnerability by crafting a job request with a malicious gid field [2]. No additional authentication or special privileges are required beyond standard job submission access. The attacker must be able to connect to the Slurm controller and submit a job with a crafted gid.

Impact

Successful exploitation could allow an attacker to run jobs with an arbitrary group ID, potentially gaining unauthorized access to resources or privileges not normally available to their user account [2]. This could lead to privilege escalation within the Slurm environment, enabling the attacker to execute tasks as a different group or access restricted data.

Mitigation

The vulnerability is fixed in Slurm versions 17.02.11 and 17.11.7, released on May 30, 2018 [2]. Users should upgrade to these or later versions. No workarounds are documented; the only resolution is to apply the patch or upgrade. SchedMD also notes that similar vulnerabilities likely affect older, unsupported releases, so upgrading to a supported fixed version is strongly recommended [2].