PT-2017-3402

🗓️ 01 Nov 2017 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 2 Views

Insecure handling of SPANK environment variable in SchedMD Slurm allows root privilege escalation.

Reporter	Title	Published	Views	Family All 249
attackerkb	CVE-2021-31215	13 May 202106:15	–	attackerkb
BDU FSTEC	The vulnerability of the Slurm resource manager, related to improper handling of the SPANK environment variable, allows a perpetrator to escalate their privileges.	8 Feb 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Slurm resource manager, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	11 Jul 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PMIx MPI resource manager plugin, developed by SLURM, arises from buffer overflows in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.	6 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SLURM resource manager involves bypassing authentication by using an alternative path or channel. This allows attackers to access confidential data, compromise its integrity, and cause service failures.	6 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PrologSlurmctld and EpilogSlurmctld scripts of the SLURM resource management tool, related to privilege management errors, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.	20 Sep 202100:00	–	bdu_fstec
Circl	CVE-2020-27745	27 Nov 202020:50	–	circl
CNNVD	SchedMD Slurm Buffer Error Vulnerability	25 Nov 202000:00	–	cnnvd
CNNVD	Schedmd SchedMD Slurm 安全漏洞	13 May 202100:00	–	cnnvd
CNVD	SLURM Prolog Security Bypass Vulnerability	9 Jan 201700:00	–	cnvd

Source	Link
packages	www.packages.debian.org/src:slurm-llnl
bdu	www.bdu.fstec.ru/vul/2019-02460
suse	www.suse.com/security/cve/CVE-2020-12693
security-tracker	www.security-tracker.debian.org/tracker/source-package/slurm-llnl
bugzilla	www.bugzilla.suse.com/1090292
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-15566
suse	www.suse.com/security/cve/CVE-2020-27746
suse	www.suse.com/security/cve/CVE-2017-15566
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2017-15566

15 Jun 2024 00:00Current

CVSS 3.17.8 - 9.8

CVSS 27.6

CVSS 39.8

EPSS0.02902

SchedMD Slurm SPANK privilege escalation root Prolog Epilog