12 matches found
RHSA-2024:4028
creationtimestamp| type| source ---|---|--- 2025-08-30 10:23:06+00:00| seen| Telegram/y04OMmpXkIonJuNQPKrf7N0zQs6VD7fXMh7ZvBcfO766kXE...
CVE-2018-10095
creationtimestamp| type| source ---|---|--- 2024-04-25 19:49:16+00:00| seen| https://t.me/arpsyndicate/4849...
SUSE-SU-2024:0311-1 Security update for slurm_22_05
This update for slurm2205 fixes the following issues: Update to slurm 22.05.11: Security fixes: - CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. bsc1218046 - CVE-2023-49936: Prevent NULL pointer dereference on sizevalp overflow. bsc1218050 - CVE-2023-49937:...
SUSE SLES15 Security Update : slurm (SUSE-SU-2024:0287-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0287-1 advisory. - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmissio...
SUSE-SU-2024:0289-1 Security update for slurm_23_02
This update for slurm2302 fixes the following issues: Update to slurm 23.02.6: Security fixes: - CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. bsc1218046 - CVE-2023-49935: Prevent message hash bypass in slurmd which can allow an attacker to reuse root-level...
SUSE-SU-2024:0280-1 Security update for slurm_23_02
This update for slurm2302 fixes the following issues: Update to slurm 23.02.6: Security fixes: - CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. bsc1218046 - CVE-2023-49935: Prevent message hash bypass in slurmd which can allow an attacker to reuse root-level...
RHSA-2024:0026
creationtimestamp| type| source ---|---|--- 2024-01-02 09:16:36+00:00| seen| https://t.me/ctinow/161593...
Improper Input Validation
libslurm.so is vulnerable to Improper Input Validation. The vulnerability exists due to the lack of length checks for the message size in slurmprotocolapi.c, which allows an attacker to modify RPC traffic in a way that bypasses message hash checks, leading to message extension attacks...
Design/Logic Flaw
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11,...
CVE-2023-49933
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11,...
GHSA-C22J-84C7-CM77 TYPO3 leaks a hash secret in an error message
The jumpUrl mechanism in class.tslibfe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret juHash in an error message, which allows remote attackers to read arbitrary files by including the hash in a request...
CVE-2020-12527
creationtimestamp| type| source ---|---|--- 2021-03-03 00:44:39+00:00| seen| https://t.me/cibsecurity/24370...