AZL-29702 CVE-2023-41915 affecting package pmix for versions less than 4.1.3-1

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0...

DEBIAN-CVE-2023-41915

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0...

CVE-2023-41915

The CVE-2023-41915 issue affects OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1, where a race condition during privileged library execution (UID 0) could let an attacker obtain ownership of arbitrary files. Multiple advisories confirm fixes across distributions (e.g., PMIx updates in AlmaLinux...

PT-2023-8876 · Unknown +9 · Openpmix Pmix +9

Name of the Vulnerable Software and Affected Versions: OpenPMIx PMIx versions 4.2.6 and earlier, 5.0.x before 5.0.1 Description: The issue is related to a race condition during the execution of library code with UID 0, allowing attackers to obtain ownership of arbitrary files. This can potentiall...

OpenPMIx PMIx Competitive Conditions Issue Vulnerability

OpenPMIx is an OpenPMIx open source implementation of the OpenPMIx standard for PMIx. A security vulnerability exists in OpenPMIx PMIx that originates from a vulnerability that allows an attacker to obtain ownership of arbitrary files during execution of library code with UID 0. Affected products...

CVE-2023-41915

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0...

SUSE CVE-2020-27745

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin...

new packages: pmix

An update is available for pmix. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

RDMA stack bug fix and enhancement update

An update is available for mpitests, ucx, rdma-core, mstflint, libvma, libpsm2, fabtests, openmpi, pmix, perftest, eth-tools, mpich, libfabric. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Buffer Overflow

Slurm is vulnerable to buffer overflow. The vulnerability exists in the PMIx MPI plugin which causes a buffer overflow which leads to an application crash...

The vulnerability of the PMIx MPI resource manager plugin, developed by SLURM, arises from buffer overflows in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PMIx MPI resource manager plugin by SLURM is related to buffer overflow in memory. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, and cause service failures...

SUSE SLES12 Security Update : slurm_20_11 / pdsh (SUSE-SU-2021:0773-1)

This update for pdsh fixes the following issues : Preparing pdsh for Slurm 20.11 jscECO-2412 Simplify convoluted condition. This update for slurm fixes the following issues : Fix potential buffer overflows from use of unpackmem. CVE-2020-27745 bsc1178890 Fix potential leak of the magic cookie whe...

SUSE SLES15 Security Update : slurm_20_02 (SUSE-SU-2021:0139-1)

This update for slurm2002 fixes the following issues : Updated to 20.02.6, addresses two security fixes : - PMIx - fix potential buffer overflows from use of unpackmem. CVE-2020-27745 bsc1178890 - X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth comman...

SUSE SLES15 Security Update : slurm (SUSE-SU-2020:3505-1)

This update for slurm fixes the following issues : CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. Note that Tenable Network...

CVE-2020-27745

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin...

CVE-2020-27745

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin...

CVE-2020-27745

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin...

Buffer overflow

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin...

UBUNTU-CVE-2020-27745

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin...

CVE-2020-27745

CVE-2020-27745 is a Slurm RPC Buffer Overflow in the PMIx MPI plugin. Connected advisories confirm the issue affects Slurm (Slurm-llnl) and dataset entries reference Ubuntu/Debian mitigations. Debian DLA-2886-1 fixes this CVE (and others) by upgrading slurm-llnl to 16.05.9-1+deb9u5; Ubuntu USN-47...