Buffer overflow

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin...

CVE-2020-27745

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin...

CVE-2020-27746

Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem...

CVE-2020-27746

CVE-2020-27746 affects Slurm before 19.05.8 and 20.x before 20.02.6, where a race condition in reading /proc X11 magic cookies via xauth can expose sensitive information to an unauthorized actor. The issue is tied to a race in the read path of /proc, enabling potential leakage of X authentication...

CVE-2020-27746

Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem...

CVE-2020-27745

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin...

CVE-2020-27745

CVE-2020-27745 is a Slurm RPC Buffer Overflow in the PMIx MPI plugin. Connected advisories confirm the issue affects Slurm (Slurm-llnl) and dataset entries reference Ubuntu/Debian mitigations. Debian DLA-2886-1 fixes this CVE (and others) by upgrading slurm-llnl to 16.05.9-1+deb9u5; Ubuntu USN-47...

CVE-2020-27745

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin...

[SECURITY] Fedora 33 Update: slurm-20.02.6-1.fc33

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...

Fedora: Security Advisory for slurm (FEDORA-2020-49b97c38e7)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for slurm (FEDORA-2020-98a5098030)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for slurm (important)

openSUSE Security Update: Security update for slurm Announcement ID: openSUSE-SU-2020:2056-1 Rating: important References: 1173805 1178890 1178891 Cross-References: CVE-2020-27745 CVE-2020-27746 Affected Products: openSUSE Leap 15.2 An update that solves two vulnerabilities and has one errata is...

OPENSUSE-SU-2020:2056-1 Security update for slurm

This update for slurm fixes the following issues: - Updated to 20.02.6: CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. Added...

OPENSUSE-SU-2020:2033-1 Security update for slurm

This update for slurm fixes the following issues: - CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. This update was imported...

Security update for slurm (important)

openSUSE Security Update: Security update for slurm Announcement ID: openSUSE-SU-2020:2033-1 Rating: important References: 1178890 1178891 Cross-References: CVE-2020-27745 CVE-2020-27746 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...

SchedMD Slurm Buffer Error Vulnerability

Schedmd SchedMD Slurm is an open source and highly scalable cluster management and job scheduling system for large and small Linux clusters from SchedMD Schedmd, USA. A buffer error vulnerability exists in SchedMD Slurm versions prior to 19.05.8 and 20.x series versions prior to 20.02.6, which...

SchedMD Slurm Competition Condition Problem Vulnerability

Schedmd SchedMD Slurm is an open source and highly scalable cluster management and job scheduling system for large and small Linux clusters from SchedMD Schedmd, USA. A security vulnerability exists in SchedMD Slurm versions prior to 19.05.8 and versions prior to 20.02.6 of the 20.x series, which...

SUSE-SU-2020:3506-1 Security update for slurm

This update for slurm fixes the following issues: - Updated to 20.02.6: CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. Added...

SUSE-SU-2020:3505-1 Security update for slurm

This update for slurm fixes the following issues: - CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891...

OPENSUSE-SU-2020:1468-1 Security update for slurm_18_08

This update for slurm1808 fixes the following issues: - Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user t...