CVE-2018-10995

CVE-2018-10995 affects Slurm where user_name and gid fields are mishandled in versions before 17.02.11 and 17.1x.y before 17.11.7. This issue was fixed in 17.11.7 (and corresponding upstream advisories across distributions). Connected notes show multiple advisories (USN/opensuse/SUSE SU-2020/2021...

CVE-2018-10995

Removed by vendor...

slurm -- insecure handling of user_name and gid fields

SchedMD reports: Insecure handling of username and gid fields CVE-2018-10995 While fixes are only available for the supported 17.02 and 17.11 releases, it is believed that similar vulnerabilities do affect past versions as well. The only resolution is to upgrade Slurm to a fixed release...

Debian DLA-1367-1 : slurm-llnl security update

CVE-2018-7033 An issue that could be used for SQL Injection attacks against SlurmDBD has been fixed. For Debian 7 'Wheezy', these problems have been fixed in version 2.3.4-2+deb7u2. We recommend that you upgrade your slurm-llnl packages. NOTE: Tenable Network Security has extracted the preceding...

[SECURITY] [DLA 1367-1] slurm-llnl security update

Package : slurm-llnl Version : 2.3.4-2+deb7u2 CVE ID : CVE-2018-7033 CVE-2018-7033 An issue that could be used for SQL Injection attacks against SlurmDBD has been fixed. For Debian 7 "Wheezy", these problems have been fixed in version 2.3.4-2+deb7u2. We recommend that you upgrade your slurm-llnl...

DLA-1367-1 slurm-llnl - security update

Bulletin has no description...

Debian: Security Advisory (DLA-1367-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2018:0987-1 Security update for slurm

This update for slurm fixes the following issues: - Fix interaction with systemd: systemd expects that a daemonizing process doesn't go away until the PID file with it PID of the daemon has bee written bsc1084125. - Make sure systemd services get restarted only when all packages are in a consiste...

[SECURITY] Fedora 28 Update: slurm-17.11.5-2.fc28

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for large and small Linux clusters...

Fedora Update for slurm FEDORA-2018-df1a571a34

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : slurm (2018-df1a571a34)

Security update to close CVE-2018-7033. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

SchedMD Slurm SQL Injection Vulnerability

SchedMD Slurm is SchedMD's open source and highly scalable cluster management and job scheduling system for large and small Linux clusters. A security vulnerability exists in SchedMD Slurm versions prior to 17.02.10 and 17.11.x versions prior to 17.11.5. An attacker can exploit this vulnerability...

FreeBSD : slurm-wlm -- SQL Injection attacks against SlurmDBD (b3e04661-2a0a-11e8-9e63-3085a9a47796)

SchedMD reports : Several issues were discovered with incomplete sanitization of user-provided text strings, which could potentially lead to SQL injection attacks against SlurmDBD itself. Such exploits could lead to a loss of accounting data, or escalation of user privileges on the cluster. C...

UBUNTU-CVE-2018-7033

SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD...

CVE-2018-7033

SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD...

CVE-2018-7033

SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD...

CVE-2018-7033

SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD...

Sql injection

SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD...

CVE-2018-7033

SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD...

CVE-2018-7033

CVE-2018-7033 affects Slurm/SlurmDBD: SQL injection in SlurmDBD is possible on Slurm versions before 17.02.10 and 17.11.x before 17.11.5. Public records reference CVE-2018-7033 across multiple advisories. Remediation per the connected sources is to upgrade Slurm/SlurmDBD to a version where the is...