Vulnerabilities

TI-2024-32629 CVE-2024-48936 · GHSA-8phj-c26v-2jj9

SchedMD Slurm before 24.05.4 has Incorrect Authorization.

LOW 23

SchedMD Slurm before 24.05.4 has Incorrect Authorization.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.0035 Published 2024-10-28 No fix listed CWE-863

TI-2023-27305 CVE-2023-49938 · GHSA-3j4p-qc5m-wqgh

An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x.

LOW 37

An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00749 Published 2023-12-14 No fix listed

TI-2023-27304 CVE-2023-49937 · GHSA-crjm-8w39-c276

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.

MEDIUM 45

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01375 Published 2023-12-14 No fix listed CWE-415

TI-2023-27303 CVE-2023-49936 · GHSA-pm82-478g-gq88

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.

LOW 35

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0111 Published 2023-12-14 No fix listed CWE-476

TI-2023-27302 CVE-2023-49935 · GHSA-r926-qjg2-q5jr

An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x.

MEDIUM 40

An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0104 Published 2023-12-14 No fix listed CWE-613

TI-2023-27301 CVE-2023-49934 · GHSA-8236-gwxc-gh9m

An issue was discovered in SchedMD Slurm 23.11.x.

MEDIUM 43

An issue was discovered in SchedMD Slurm 23.11.x.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00765 Published 2023-12-14 No fix listed CWE-89

TI-2023-27300 CVE-2023-49933 · GHSA-hgjx-j8hg-pxrf

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.

LOW 33

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00375 Published 2023-12-14 No fix listed CWE-924

TI-2023-22301 CVE-2023-41914 · GHSA-v8jm-8mp9-5962

SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race…

LOW 32

SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00185 Published 2023-11-03 No fix listed CWE-362

TI-2022-11961 CVE-2022-29500 · GHSA-8g6p-72jw-r627

SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.

MEDIUM 42

SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02221 Published 2022-05-05 No fix listed

TI-2022-11962 CVE-2022-29501 · GHSA-hqrm-v6gj-7wmf

SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to…

MEDIUM 44

SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges and code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03524 Published 2022-05-05 No fix listed

TI-2022-11963 CVE-2022-29502 · GHSA-56x4-r7hf-449r

SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges.

MEDIUM 46

SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01794 Published 2022-05-05 No fix listed

TI-2021-19323 CVE-2021-43337 · GHSA-c6cp-7frc-r847

SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control.

LOW 31

SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01239 Published 2021-11-17 No fix listed

TI-2021-11429 CVE-2021-31215 · GHSA-wg2q-q9j3-c3v8

SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote…

MEDIUM 43

SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02902 Published 2021-05-13 No fix listed

TI-2020-16831 CVE-2020-27746 · GHSA-9682-j923-q58c

Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an…

LOW 19

Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00834 Published 2020-11-27 No fix listed CWE-362

TI-2020-16830 CVE-2020-27745 · GHSA-v3h5-8p7p-2vrg

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.

MEDIUM 46

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02242 Published 2020-11-27 No fix listed CWE-120

TI-2020-10093 CVE-2020-12693 · GHSA-9rpg-w3f6-9mpm

Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message…

MEDIUM 40

Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02314 Published 2020-05-21 No fix listed

TI-2019-14213 CVE-2019-19727 · GHSA-wmqm-x8vm-v6mh

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.

LOW 25

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00354 Published 2020-01-13 No fix listed CWE-732

TI-2019-14214 CVE-2019-19728 · GHSA-grp5-5rv9-mqr6

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.

LOW 35

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01297 Published 2020-01-13 No fix listed CWE-269

TI-2019-09617 CVE-2019-12838 · GHSA-h39m-vmcf-q43p

SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection.

MEDIUM 47

SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0279 Published 2019-07-11 No fix listed CWE-89

TI-2019-04508 CVE-2019-6438 · GHSA-29g2-g2r5-p4x5

SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems.

MEDIUM 47

SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02332 Published 2019-01-31 No fix listed

TI-2018-07793 CVE-2018-10995 · GHSA-mpcp-f66m-rf47

SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka…

LOW 27

SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.0168 Published 2018-05-30 No fix listed CWE-20

TI-2018-05107 CVE-2018-7033 · GHSA-qhw8-g654-xfjq

SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD.

MEDIUM 46

SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01875 Published 2018-03-15 No fix listed CWE-89

TI-2017-11367 CVE-2017-15566 · GHSA-h3p2-v728-89g5

Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11…

LOW 35

Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00578 Published 2017-11-01 No fix listed CWE-426

TI-2016-08116 CVE-2016-10030 · GHSA-9w2c-9wm9-hvcg

The _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7…

MEDIUM 40

The _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.02531 Published 2017-01-05 No fix listed CWE-284

Vulnerabilities

Filters