agnostik (>=0.2.0, <=0.2.3), aprun (0.2.0) +70 more potentially affected by unknown CVE via tokio (>=0.3.7, <=1.36.0)

tokio CARGO version =0.3.7, =0.2.0, =0.11.0, =0.5.0, =1.0.0, =0.4.0-beta.1, =0.2.0, =0.6.0, =0.4.0, =0.5.0 and more Source cves: unknown CVE Source advisory: GHSA-RR8G-9FPQ-6WMG...

agnostik (>=0.2.0, <=0.2.3), aprun (0.2.0) +70 more potentially affected by unknown CVE via tokio (>=0.3.7, <=1.36.0)

tokio CARGO version =0.3.7, =0.2.0, =0.11.0, =0.5.0, =1.0.0, =0.4.0-beta.1, =0.2.0, =0.6.0, =0.4.0, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RR8G-9FPQ-6WMG...

agnostik (>=0.2.0, <=0.2.3), aprun (0.2.0) +70 more potentially affected by unknown CVE via tokio (>=0.3.7, <=1.36.0)

tokio CARGO version =0.3.7, =0.2.0, =0.11.0, =0.5.0, =1.0.0, =0.4.0-beta.1, =0.2.0, =0.6.0, =0.4.0, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0023...

CVE-2014-0748

CVE-2014-0748 affects Cray Aprun/Apinit on Cray supercomputers. The issue arises from the apinit service not validating the UID in launch messages received via aprun against the ALPS-authenticated UID, allowing a local user to escalate privileges to root on a compute node. Affected versions were ...

CVE-2014-0748

apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local users to gain privileges via a modified aprun program, aka ID FN5912...

PT-2014-3811

Name of the Vulnerable Software and Affected Versions apinit on Cray devices with CLE version 4.2 before 4.2.UP02 apinit on Cray devices with CLE version 5.x before 5.1.UP00 Description The issue concerns the apinit on Cray devices, where it does not properly validate the UID in a launch message...

CVE-2014-0748: Improper Input Validation

apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local users to gain privileges via a modified aprun program, aka ID FN5912...

Cray supercomputers privilege escalation

root privileges escalation via aprun/apinit...

[mwrlabs advisory][CVE-2014-0748] Cray Aprun/Apinit Privilege Escalation

Cray Aprun/Apinit Privilege Escalation ====================================== MWR have identified a vulnerability which allows users to escalate their privileges to root on Cray supercomputers. This advisory details the vulnerability and the patches which Cray customers can apply in order to...