CVE-2018-7033
SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL In ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 7 | slurm-llnl | 2.3.4-2+deb7u2 |
| debian 8 | slurm-llnl | 14.03.9-5+deb8u3 |
| debian 9 | slurm-llnl | 16.05.9-1+deb9u2 |
| ubuntu 14.04-ESM | slurm-llnl | 2.6.5-1ubuntu0.1~esm4 |
| ubuntu 16.04-ESM | slurm-llnl | 15.08.7-1ubuntu0.1~esm3 |
| ubuntu 18.04-ESM | slurm-llnl | 17.11.2-1ubuntu0.1~esm3 |
Referanslar
- https://bugs.schedmd.com/show_bug.cgi?id=4792 (not yet public)
- https://github.com/SchedMD/slurm/commit/2f5e924bf6e018dbcef24bcda9683d6b3662f6d4
- https://github.com/SchedMD/slurm/commit/db468895240ad6817628d07054fe54e71273b2fe
- https://lists.debian.org/debian-lts-announce/2018/04/msg00032.html
- https://lists.debian.org/debian-lts-announce/2018/07/msg00029.html
- https://lists.schedmd.com/pipermail/slurm-announce/2018/000006.html
- https://ubuntu.com/security/notices/USN-4781-1
- https://www.cve.org/CVERecord?id=CVE-2018-7033