16 matches found
USN-6458-1: Slurm vulnerabilities
It was discovered that Slurm did not properly handle credential management, which could allow an unprivileged user to impersonate the SlurmUser account. An attacker could possibly use this issue to execute arbitrary code as the root user. CVE-2022-29500 It was discovered that Slurm did not proper...
USN-6458-1 slurm-llnl, slurm-wlm vulnerabilities
It was discovered that Slurm did not properly handle credential management, which could allow an unprivileged user to impersonate the SlurmUser account. An attacker could possibly use this issue to execute arbitrary code as the root user. CVE-2022-29500 It was discovered that Slurm did not proper...
SUSE CVE-2019-19728
SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges...
The vulnerability of the `srun --uid` command for SLURM resource managers stems from insecure privilege management. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the srun --uid command used by SLURM resource managers is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...
SUSE SLES12 Security Update : slurm_20_11 / pdsh (SUSE-SU-2021:0773-1)
This update for pdsh fixes the following issues : Preparing pdsh for Slurm 20.11 jscECO-2412 Simplify convoluted condition. This update for slurm fixes the following issues : Fix potential buffer overflows from use of unpackmem. CVE-2020-27745 bsc1178890 Fix potential leak of the magic cookie whe...
SUSE SLED15 / SLES15 Security Update : pdsh, slurm_18_08 (SUSE-SU-2020:0443-1)
This update for pdsh, slurm1808 fixes the following issues : Slurm was included in the 18.08 release, as 'slurm1808' package. The version 18.08.9 contains all recent security fixes, including : CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects...
SUSE SLES12 Security Update : pdsh, slurm_18_08 (SUSE-SU-2020:0434-1)
This update for pdsh, slurm1808 fixes the following issues : Slurm was included in the 18.08 release, as 'slurm1808' package. The version 18.08.9 contains all recent security fixes, including : CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects...
openSUSE Security Update : slurm (openSUSE-2020-85)
This update for slurm to version 18.08.9 fixes the following issues : Security issues fixed : - CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects bsc1159692. - CVE-2019-12838: Fixed SchedMD Slurm SQL Injection issue bnc1140709. - CVE-2019-19727...
UBUNTU-CVE-2019-19728
SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges...
CVE-2019-19728
SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges...
openSUSE Security Update : slurm (openSUSE-2019-2536)
This update for slurm fixes the following issues : Security issue fixed : - CVE-2019-12838: Fixed a SQL injection bsc1140709. Non-security issue fixed : - Added X11-forwarding bsc1153245. - Moved srun from 'slurm' to 'slurm-node': srun is required on the nodes as well so sbatch will work...
openSUSE: Security Advisory for slurm (openSUSE-SU-2019:2536-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for slurm (moderate)
openSUSE Security Update: Security update for slurm Announcement ID: openSUSE-SU-2019:2536-1 Rating: moderate References: 1140709 1153095 1153245 Cross-References: CVE-2019-12838 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has two fixes is now available...
深澜安全认证网络管理计费系统(Srun 3000) /srun3/srun/services/modules/login/controller/login_controller.php任意文件下载漏
0x01 漏洞框架 Srun3000深澜校园宽带客户端是深澜软件面向校园网推出的安全认证网络管理计费产品。 /srun3/srun/services/modules/login/controller/logincontroller.php存在任意文件下载漏洞。 影响厂商：深澜软件 官方主页：http://www.srun.com/ 深澜软件的Srun 3000 安全认证网络管理计费产品家族由Srun 3000 Gateway System和 Srun 3000 Radius System组成。获得众多用户好评的Srun 3000 Gateway 认证计费系统在...
深澜Srun 3000 安全认证网络管理计费系统客户端拒绝服务漏洞
简要描述： 深澜Srun 3000 安全认证客户端存在拒绝服务漏洞 详细说明： 导致拒绝服务问题的函数是sub4015C0 如上， v9 = strtolconst char &v19, 0, 16 strtol函数将V19转换成有符号数后赋值给v9，而v9为无符号数。在将有符号数转换为无符号数时没有加验证，因此如果v19为字符串“-1”，转换后的v9就会变成0xFFFFFFFF，接下来的字符串拷贝操作strncpy&Src, v15, v9;就会导致拷贝长度出错，从而导致拒绝服务的产生。 漏洞证明： 无。...