CVE-2019-12838: debian debian_linux SQL Injection
CVSS: 9.8v3.1CriticalModified
AliasesSUSE-SU-2019:2229-1SUSE-SU-2019:2989-1UBUNTU-CVE-2019-12838DSA-4572-1openSUSE-SU-2019:2052-1openSUSE-SU-2019:2536-1
Published 11-07-2019Last modified 04-08-2024
Vulnerability summary
CVE-2019-12838 is a critical (CVSS 9.8) SQL Injection vulnerability in debian debian_linux. EPSS estimates a 2.79% chance of exploitation in the next 30 days, higher than 86.2% of scored vulnerabilities.
CVSS score
9.8/10
010
Critical · v3.1 (NVD)EPSS score
2.79%
0%100%
Low · +0.11 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 10 · Related 8Timeline
- 11-07-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection.
CVSS metrics
3 scores · 2 sources · 2 versionsCritical 9.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 2 agree
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
High 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
2.79%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
+0.11 pp
From 2.68% on 20-09-2026
20-09-202620-10-2026
EPSS score2.79%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse5 products
- perl-Switch&distro=SUSE Linux Enterprise Module for Development Tools 15< 2.17-3.2.1
- perl-Switch&distro=SUSE Linux Enterprise Module for Development Tools 15 SP1< 2.17-3.2.1
- perl-Switch&distro=SUSE Linux Enterprise Module for HPC 15 SP1< 2.17-3.2.1
- slurm&distro=SUSE Linux Enterprise Module for HPC 15< 17.11.13-6.18.1
- slurm&distro=SUSE Linux Enterprise Module for HPC 15 SP1< 18.08.8-3.4.1 | < 17.11.13-6.18.1
Opensuse3 products
- leapEOL15.0 | 15.1
- slurm&distro=openSUSE Leap 15.0< 17.11.13-lp150.5.24.1
- slurm&distro=openSUSE Leap 15.1< 18.08.8-lp151.2.3.1
Debian2 products
- slurm-llnl< 18.08.5.2-1+deb10u1
- debian_linuxEOL8.0 | 9.0 | 10.0
Fedoraproject1 product
- fedoraEOL29 | 30
Schedmd1 product
- slurm> 17.11.0.0, ≤ 17.11.13.2 | > 18.08.0, ≤ 18.08.7 | 19.05.0
Ubuntu1 product
- slurm-llnlAll versions (No fix recorded)
6 vendors · 13 products
References
23 links- lists.schedmd.com/pipermail/slurm-announce/2019/000025.htmlX Refsource CONFIRMMailing ListVendor AdvisoryREPORT
- lists.opensuse.org/opensuse-security-announce/2019-09/msg00005.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-11/msg00051.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 23 references
- lists.opensuse.org/opensuse-security-announce/2020-01/msg00038.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2020/03/msg00016.htmlMailing ListX Refsource MLISTThird Party Advisory
- lists.debian.org/debian-lts-announce/2022/01/msg00011.htmlMailing ListX Refsource MLISTThird Party Advisory
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory