CVE-2022-29502
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control tha ...
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Ubuntu (moyenne).
Description
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| debian 12 | slurm-wlm | 21.08.8.2-1 |
| debian 13 | slurm-wlm | 21.08.8.2-1 |
| debian 14 | slurm-wlm | 21.08.8.2-1 |
| echo | slurm-wlm | 21.08.8.2-1 |
| rapidfort ubuntu 20.04 | rf-slurm-wlm, slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 22.04 | rf-slurm-wlm, slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 24.04 | rf-slurm-wlm, slurm-wlm | 0:21.08.5-2ubuntu2 |
| ubuntu 22.04 | slurm-wlm | pas de correctif indiqué |
Afficher les 11 entrées de 8 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| debian 12 | slurm-wlm | 21.08.8.2-1 |
| debian 13 | slurm-wlm | 21.08.8.2-1 |
| debian 14 | slurm-wlm | 21.08.8.2-1 |
| echo | slurm-wlm | 21.08.8.2-1 |
| rapidfort ubuntu 20.04 | rf-slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 20.04 | slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 22.04 | rf-slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 22.04 | slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 24.04 | rf-slurm-wlm | 0:21.08.5-2ubuntu2 |
| rapidfort ubuntu 24.04 | slurm-wlm | 0:21.08.5-2ubuntu2 |
| ubuntu 22.04 | slurm-wlm | pas de correctif indiqué |
Références
- https://github.com/SchedMD/slurm/commit/351669e7db3b5bc84b5791dc3626d683b8abe18e%20%28slurm-21-08-8-1%29
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXLOI3ERTKMZR2KWNRN7OR5S55VPWENH/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y6B7OWVNVCJUDE6VDWGCBUWMRCRETAO3/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YBI4NFDGGMBKWG4EMSZL5UHATDCLPCQW/
- https://lists.schedmd.com/pipermail/slurm-announce/
- https://lists.schedmd.com/pipermail/slurm-announce/2022/000072.html
- https://ubuntu.com/security/notices/USN-6458-1
- https://www.cve.org/CVERecord?id=CVE-2022-29502