CVE-2023-49937

2023-12-1405:15:11

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-49937

denial of service

arbitrary code execution

unix

fixed versions

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.4%

JSON

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a denial of service or possibly execute arbitrary code. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.

OSVersionArchitecturePackageVersionFilename
Debian10allslurm-llnl<= 18.08.5.2-1+deb10u2slurm-llnl_18.08.5.2-1+deb10u2_all.deb
Debian12allslurm-wlm< 22.05.8-4+deb12u2slurm-wlm_22.05.8-4+deb12u2_all.deb
Debian11allslurm-wlm<= 20.11.7+really20.11.4-2+deb11u1slurm-wlm_20.11.7+really20.11.4-2+deb11u1_all.deb
Debian999allslurm-wlm< 23.11.3-1slurm-wlm_23.11.3-1_all.deb
Debian13allslurm-wlm< 23.11.3-1slurm-wlm_23.11.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	10	all	slurm-llnl	<= 18.08.5.2-1+deb10u2	slurm-llnl_18.08.5.2-1+deb10u2_all.deb
Debian	12	all	slurm-wlm	< 22.05.8-4+deb12u2	slurm-wlm_22.05.8-4+deb12u2_all.deb
Debian	11	all	slurm-wlm	<= 20.11.7+really20.11.4-2+deb11u1	slurm-wlm_20.11.7+really20.11.4-2+deb11u1_all.deb
Debian	999	all	slurm-wlm	< 23.11.3-1	slurm-wlm_23.11.3-1_all.deb
Debian	13	all	slurm-wlm	< 23.11.3-1	slurm-wlm_23.11.3-1_all.deb