Schedmd Slurm vulnerabilities, page 2
25 vulnerabilities
Known vulnerabilities in Schedmd Slurm, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-49933debianslurm-wlm+3
EPSS score0.38%
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.CVE-2023-49936debianslurm-wlm+3EPSS score1.11%
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.CVE-2023-49934ubuntuslurm-llnl+2EPSS score0.77%
An issue was discovered in SchedMD Slurm 23.11.x. There is SQL Injection against the SlurmDBD database. The fixed version is 23.11.1.CVE-2023-49935debianslurm-wlm+2EPSS score1.04%
An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.CVE-2023-49937debianslurm-wlm+3EPSS score1.38%
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a denial of service or possibly execute arbitrary code. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.