Fedora 37 : slurm (2022-417587a4b9)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-417587a4b9 advisory. Automatic update for slurm-21.08.8-1.fc37. Changelog Thu May 5 2022 Carl George - 21.08.8-1 - Update to 21.08.8, resolves: rhbz2082276 - Fix...

Ubuntu: Security Advisory (USN-6458-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6458-1: Slurm vulnerabilities

It was discovered that Slurm did not properly handle credential management, which could allow an unprivileged user to impersonate the SlurmUser account. An attacker could possibly use this issue to execute arbitrary code as the root user. CVE-2022-29500 It was discovered that Slurm did not proper...

Ubuntu 20.04 ESM / 22.04 ESM : Slurm vulnerabilities (USN-6458-1)

The remote Ubuntu 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6458-1 advisory. It was discovered that Slurm did not properly handle credential management, which could allow an unprivileged user to impersonate the SlurmUs...

CVE-2022-29502

SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges...

CVE-2022-29502

CVE-2022-29502 affects SchedMD Slurm 21.08.x through 20.11.x. The issue stems from an improper access-control check due to flawed validation logic in the srun client when processing input/output, which could allow an unprivileged user to escalate privileges or intercept I/O. Public references in ...