CVE-2021-43337

SchedMD Slurm 21.08. before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=jobscript and/or jobenv options, the access control rules in SlurmDBD may permit users to request job scripts and environment files to which they should not have access...

CVE-2021-43337

SchedMD Slurm 21.08. before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=jobscript and/or jobenv options, the access control rules in SlurmDBD may permit users to request job scripts and environment files to which they should not have access...

SUSE-SU-2020:3878-1 Security update for slurm_17_11

This update for slurm1711 fixes the following issues: - CVE-2020-27745: Fixed potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: Fixed a potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. - Fixed %posttrans macro resupdate to...

OPENSUSE-SU-2020:0085-1 Security update for slurm

This update for slurm to version 18.08.9 fixes the following issues: Security issues fixed: - CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects bsc1159692. - CVE-2019-12838: Fixed SchedMD Slurm SQL Injection issue bnc1140709. - CVE-2019-19727:...

SUSE SLES12 Security Update : slurm (SUSE-SU-2018:0987-1)

This update for slurm fixes the following issues : - Fix interaction with systemd: systemd expects that a daemonizing process doesn't go away until the PID file with it PID of the daemon has bee written bsc1084125. - Make sure systemd services get restarted only when all packages are in a...

UBUNTU-CVE-2018-7033

SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD...

CVE-2018-7033

SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD...

Sql injection

SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD...

CVE-2018-7033

Removed by vendor...

CVE-2018-7033

CVE-2018-7033 affects Slurm/SlurmDBD: SQL injection in SlurmDBD is possible on Slurm versions before 17.02.10 and 17.11.x before 17.11.5. Public records reference CVE-2018-7033 across multiple advisories. Remediation per the connected sources is to upgrade Slurm/SlurmDBD to a version where the is...

slurm-wlm -- SQL Injection attacks against SlurmDBD

SchedMD reports: Several issues were discovered with incomplete sanitization of user-provided text strings, which could potentially lead to SQL injection attacks against SlurmDBD itself. Such exploits could lead to a loss of accounting data, or escalation of user privileges on the cluster...