TI-2025-28471 CVE-2025-43904 · GHSA-2778-hrgh-cpxw
Incorrect authorization in SchedMD Slurm
Priority LOW 19
In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a Coordinator to promote a user to Administrator.
Vulnerabilities
25 records
TI-2024-32629 CVE-2024-48936 · GHSA-8phj-c26v-2jj9
SchedMD Slurm before 24.05.4 has Incorrect Authorization.
Priority LOW 23
SchedMD Slurm before 24.05.4 has Incorrect Authorization.
TI-2023-27305 CVE-2023-49938 · GHSA-3j4p-qc5m-wqgh
An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x.
Priority LOW 37
An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x.
TI-2023-27304 CVE-2023-49937 · GHSA-crjm-8w39-c276
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.
Priority MEDIUM 45
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.
TI-2023-27303 CVE-2023-49936 · GHSA-pm82-478g-gq88
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.
Priority LOW 35
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.
TI-2023-27302 CVE-2023-49935 · GHSA-r926-qjg2-q5jr
An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x.
Priority MEDIUM 40
An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x.
TI-2023-27301 CVE-2023-49934 · GHSA-8236-gwxc-gh9m
An issue was discovered in SchedMD Slurm 23.11.x.
Priority MEDIUM 43
An issue was discovered in SchedMD Slurm 23.11.x.
TI-2023-27300 CVE-2023-49933 · GHSA-hgjx-j8hg-pxrf
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.
Priority LOW 33
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.
TI-2023-22301 CVE-2023-41914 · GHSA-v8jm-8mp9-5962
SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race…
Priority LOW 32
SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.
TI-2022-11961 CVE-2022-29500 · GHSA-8g6p-72jw-r627
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
Priority MEDIUM 42
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
TI-2022-11962 CVE-2022-29501 · GHSA-hqrm-v6gj-7wmf
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to…
Priority MEDIUM 44
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges and code execution.
TI-2022-11963 CVE-2022-29502 · GHSA-56x4-r7hf-449r
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges.
Priority MEDIUM 46
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges.
TI-2021-19323 CVE-2021-43337 · GHSA-c6cp-7frc-r847
SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control.
Priority LOW 31
SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control.
TI-2021-11429 CVE-2021-31215 · GHSA-wg2q-q9j3-c3v8
SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote…
Priority MEDIUM 43
SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling.
TI-2020-16831 CVE-2020-27746 · GHSA-9682-j923-q58c
Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an…
Priority LOW 19
Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem.
TI-2020-16830 CVE-2020-27745 · GHSA-v3h5-8p7p-2vrg
Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.
Priority MEDIUM 46
Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.
TI-2020-10093 CVE-2020-12693 · GHSA-9rpg-w3f6-9mpm
Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message…
Priority MEDIUM 40
Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel.
TI-2019-14213 CVE-2019-19727 · GHSA-wmqm-x8vm-v6mh
SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.
Priority LOW 25
SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.
TI-2019-14214 CVE-2019-19728 · GHSA-grp5-5rv9-mqr6
SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.
Priority LOW 35
SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.
TI-2019-09617 CVE-2019-12838 · GHSA-h39m-vmcf-q43p
SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection.
Priority MEDIUM 47
SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection.
TI-2019-04508 CVE-2019-6438 · GHSA-29g2-g2r5-p4x5
SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems.
Priority MEDIUM 47
SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems.
TI-2018-07793 CVE-2018-10995 · GHSA-mpcp-f66m-rf47
SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka…
Priority LOW 27
SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields).
TI-2018-05107 CVE-2018-7033 · GHSA-qhw8-g654-xfjq
SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD.
Priority MEDIUM 46
SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD.
TI-2017-11367 CVE-2017-15566 · GHSA-h3p2-v728-89g5
Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11…
Priority LOW 35
Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution.
TI-2016-08116 CVE-2016-10030 · GHSA-9w2c-9wm9-hvcg
The _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7…
Priority MEDIUM 40
The _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node.