HPESBCR04583 rev.1 - Multiple Vulnerabilities In HPC Configurations Using Slurm

🗓️ 15 Dec 2023 00:00:00Reported by hpeType

hpe

hpe🔗 support.hpe.com👁 1 Views

Multiple Slurm vulnerabilities in HPC configurations; patches are available from HPE support.

Reporter	Title	Published	Views	Family All 222
FreeBSD	slurm-wlm -- Several security issues	29 Nov 202300:00	–	freebsd
ATTACKERKB	CVE-2023-41914	3 Nov 202305:15	–	attackerkb
BDU FSTEC	The vulnerability of the sbcast subsystem of the Slurm resource manager allows attackers to circumvent existing security restrictions.	11 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Slurm resource manager, related to pointer swapping errors, allows a perpetrator to trigger a service failure.	12 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Slurm resource manager, related to a memory rerelease error, allows a attacker to cause a service failure or execute arbitrary code.	12 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Slurm resource manager, related to incorrect session duration settings, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	12 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Slurm resource manager lies in the insufficient implementation of message integrity during transmission to the communication channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks.	12 Jan 202400:00	–	bdu_fstec
Circl	CVE-2023-49933	10 Jan 202415:11	–	circl
Circl	CVE-2023-49934	10 Jan 202416:11	–	circl
Circl	CVE-2023-49935	10 Jan 202415:11	–	circl

Vulners

Node

hpe cray_programming_environment_slurmRange22.10–23.05

15 Dec 2023 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.18.8 - 9.8

EPSS0.01386

SSVC

slurm vulnerabilities hpe cray slurm local session reuse remote file download denial of service arbitrary code execution sql injection null pointer patches available