CVE-2022-29502
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control tha ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 12 | slurm-wlm | 21.08.8.2-1 |
| debian 13 | slurm-wlm | 21.08.8.2-1 |
| debian 14 | slurm-wlm | 21.08.8.2-1 |
| echo | slurm-wlm | 21.08.8.2-1 |
| rapidfort ubuntu 20.04 | rf-slurm-wlm, slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 22.04 | rf-slurm-wlm, slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 24.04 | rf-slurm-wlm, slurm-wlm | 0:21.08.5-2ubuntu2 |
| ubuntu 22.04 | slurm-wlm | kein Fix angegeben |
Alle 11 Einträge aus 8 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 12 | slurm-wlm | 21.08.8.2-1 |
| debian 13 | slurm-wlm | 21.08.8.2-1 |
| debian 14 | slurm-wlm | 21.08.8.2-1 |
| echo | slurm-wlm | 21.08.8.2-1 |
| rapidfort ubuntu 20.04 | rf-slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 20.04 | slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 22.04 | rf-slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 22.04 | slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 24.04 | rf-slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 24.04 | slurm-wlm | 0:21.08.5-2ubuntu2 |
| ubuntu 22.04 | slurm-wlm | kein Fix angegeben |
Referenzen
- https://github.com/SchedMD/slurm/commit/351669e7db3b5bc84b5791dc3626d683b8abe18e%20%28slurm-21-08-8-1%29
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXLOI3ERTKMZR2KWNRN7OR5S55VPWENH/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y6B7OWVNVCJUDE6VDWGCBUWMRCRETAO3/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YBI4NFDGGMBKWG4EMSZL5UHATDCLPCQW/
- https://lists.schedmd.com/pipermail/slurm-announce/
- https://lists.schedmd.com/pipermail/slurm-announce/2022/000072.html
- https://ubuntu.com/security/notices/USN-6458-1
- https://www.cve.org/CVERecord?id=CVE-2022-29502