Debian Security Bug TrackerDEBIANCVE:CVE-2022-31251CVE-2022-31251
6.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
2.4 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:H/Au:S/C:P/I:N/A:P
0.0004 Low
EPSS
Percentile
5.3%
A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | slurm-wlm | < 22.05.8-4+deb12u2 | slurm-wlm_22.05.8-4+deb12u2_all.deb |
| Debian | 11 | all | slurm-wlm | < 20.11.7+really20.11.4-2+deb11u1 | slurm-wlm_20.11.7+really20.11.4-2+deb11u1_all.deb |
| Debian | 999 | all | slurm-wlm | < 23.11.4-1.4 | slurm-wlm_23.11.4-1.4_all.deb |
| Debian | 13 | all | slurm-wlm | < 23.11.3-2 | slurm-wlm_23.11.3-2_all.deb |
Related
6.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
2.4 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:H/Au:S/C:P/I:N/A:P
0.0004 Low
EPSS
Percentile
5.3%