rpm package
suse/slurm&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
pkg:rpm/suse/slurm&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS
Vulnerabilities (8)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-49938 | — | < 20.02.7-150200.3.20.1 | 20.02.7-150200.3.20.1 | Dec 14, 2023 | An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an attacker can modified their extended group list that is used with the sbcast subsystem, and open files with an unauthorized set of extended groups. The fixed versions are 22.05.11 | ||
| CVE-2023-49937 | — | < 20.02.7-150200.3.20.1 | 20.02.7-150200.3.20.1 | Dec 14, 2023 | An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a denial of service or possibly execute arbitrary code. The fixed versions are 22.05.11, 23.02.7, and 23.11.1. | ||
| CVE-2023-49936 | — | < 20.02.7-150200.3.20.1 | 20.02.7-150200.3.20.1 | Dec 14, 2023 | An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1. | ||
| CVE-2023-49933 | — | < 20.02.7-150200.3.20.1 | 20.02.7-150200.3.20.1 | Dec 14, 2023 | An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. The fixed versions ar | ||
| CVE-2023-41914 | — | < 20.02.7-150200.3.17.1 | 20.02.7-150200.3.17.1 | Nov 3, 2023 | SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files. | ||
| CVE-2022-31251 | — | < 20.02.7-150200.3.14.2 | 20.02.7-150200.3.14.2 | Sep 7, 2022 | A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3. | ||
| CVE-2022-29500 | — | < 20.02.7-150200.3.14.2 | 20.02.7-150200.3.14.2 | May 5, 2022 | SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure. | ||
| CVE-2022-29501 | — | < 20.02.7-150200.3.14.2 | 20.02.7-150200.3.14.2 | May 5, 2022 | SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges and code execution. |
- CVE-2023-49938Dec 14, 2023affected < 20.02.7-150200.3.20.1fixed 20.02.7-150200.3.20.1
An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an attacker can modified their extended group list that is used with the sbcast subsystem, and open files with an unauthorized set of extended groups. The fixed versions are 22.05.11
- CVE-2023-49937Dec 14, 2023affected < 20.02.7-150200.3.20.1fixed 20.02.7-150200.3.20.1
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a denial of service or possibly execute arbitrary code. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
- CVE-2023-49936Dec 14, 2023affected < 20.02.7-150200.3.20.1fixed 20.02.7-150200.3.20.1
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
- CVE-2023-49933Dec 14, 2023affected < 20.02.7-150200.3.20.1fixed 20.02.7-150200.3.20.1
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. The fixed versions ar
- CVE-2023-41914Nov 3, 2023affected < 20.02.7-150200.3.17.1fixed 20.02.7-150200.3.17.1
SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.
- CVE-2022-31251Sep 7, 2022affected < 20.02.7-150200.3.14.2fixed 20.02.7-150200.3.14.2
A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3.
- CVE-2022-29500May 5, 2022affected < 20.02.7-150200.3.14.2fixed 20.02.7-150200.3.14.2
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
- CVE-2022-29501May 5, 2022affected < 20.02.7-150200.3.14.2fixed 20.02.7-150200.3.14.2
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges and code execution.