Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

USN-4781-1: Slurm vulnerabilities

🗓️ 25 May 2022 10:41:59Reported by UbuntuType 
ubuntu
 ubuntu🔗 ubuntu.com👁 121 Views

Slurm vulnerabilities affecting Ubuntu 14.04, 16.04, 18.04, and 20.04 ES

Related
Packages
ReporterTitlePublishedViews
Family
FreeBSD		slurm -- insecure handling of user_name and gid fields
30 May 201800:00
–freebsd
FreeBSD		slurm-wlm -- SQL Injection attacks against SlurmDBD
15 Mar 201800:00
–freebsd
BDU FSTEC		The vulnerability of the Slurm resource manager, related to improper handling of the SPANK environment variable, allows a perpetrator to escalate their privileges.
8 Feb 201800:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Slurm resource manager, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
11 Jul 201900:00
–bdu_fstec
BDU FSTEC		The vulnerability of the SLURM resource manager, related to the insecure storage of confidential information, allows a perpetrator to gain access to confidential data.
6 Apr 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the PMIx MPI resource manager plugin, developed by SLURM, arises from buffer overflows in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
6 Apr 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the SLURM resource manager involves bypassing authentication by using an alternative path or channel. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
6 Apr 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the PrologSlurmctld and EpilogSlurmctld scripts of the SLURM resource management tool, related to privilege management errors, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
20 Sep 202100:00
–bdu_fstec
Circl		CVE-2020-27745
27 Nov 202020:50
–circl
Circl		CVE-2020-27746
27 Nov 202020:50
–circl
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Ubuntu16.04anylibpam-slurm15.08.7-1ubuntu0.1~esm4libpam-slurm_15.08.7-1ubuntu0.1~esm4_any.deb
Ubuntu18.04anylibpam-slurm17.11.2-1ubuntu0.1~esm4libpam-slurm_17.11.2-1ubuntu0.1~esm4_any.deb
Ubuntu20.04anylibpam-slurm19.05.5-1ubuntu0.1~esm1libpam-slurm_19.05.5-1ubuntu0.1~esm1_any.deb
Ubuntu14.04anylibpam-slurm2.6.5-1ubuntu0.1~esm5libpam-slurm_2.6.5-1ubuntu0.1~esm5_any.deb
Ubuntu20.04anylibpam-slurm-adopt19.05.5-1ubuntu0.1~esm1libpam-slurm-adopt_19.05.5-1ubuntu0.1~esm1_any.deb
Ubuntu16.04anylibpmi015.08.7-1ubuntu0.1~esm4libpmi0_15.08.7-1ubuntu0.1~esm4_any.deb
Ubuntu18.04anylibpmi017.11.2-1ubuntu0.1~esm4libpmi0_17.11.2-1ubuntu0.1~esm4_any.deb
Ubuntu20.04anylibpmi019.05.5-1ubuntu0.1~esm1libpmi0_19.05.5-1ubuntu0.1~esm1_any.deb
Ubuntu14.04anylibpmi02.6.5-1ubuntu0.1~esm5libpmi0_2.6.5-1ubuntu0.1~esm5_any.deb
Ubuntu16.04anylibpmi0-dev15.08.7-1ubuntu0.1~esm4libpmi0-dev_15.08.7-1ubuntu0.1~esm4_any.deb
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
25 May 2022 10:41Current
7.7High risk
Vulners AI Score7.7
CVSS 27.6
CVSS 39.8
CVSS 3.19.8
EPSS0.02472
slurmubuntuvulnerabilitiesesmcontrolarbitrary fileelevated privilegessql queriesadministrative privilegesrpc inputsgraphical sessionenvironment parameters.
121