PT-2018-10233 · Schedmd+3 · Slurm+3

Publicado 2018-05-30 · Atualizado 2024-06-15 · CVE-2018-10995

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions SchedMD Slurm versions prior to 17.02.11 SchedMD Slurm versions 17.1x.x prior to 17.11.7

Description The issue concerns the mishandling of user name fields and gid fields, which could potentially lead to security issues.

Recommendations For versions prior to 17.02.11, update to version 17.02.11 or later. For versions 17.1x.x prior to 17.11.7, update to version 17.11.7 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-10995

DLA-1437-1

DLA-1437-2

DSA-4254-1

OPENSUSE-SU-2018_1955-1

OPENSUSE-SU-2024:11389-1

SUSE-SU-2018:1652-1

SUSE-SU-2018:1925-1

SUSE-SU-2018_1652-1

SUSE-SU-2018_1925-1

SUSE-SU-2020:0434-1

SUSE-SU-2020:0443-1

SUSE-SU-2020:2607-1

SUSE-SU-2021:0773-1

USN-4781-1

USN-4781-2

Produtos afetados

Linuxmint

Slurm

Suse

Ubuntu

Referências · 113

• https://github.com/SchedMD/slurm/commit/033dc0d1d28b8d2ba1a5187f564a01c15187eb4e · Nota
• https://github.com/SchedMD/slurm/commit/df545955e4f119974c278bff0c47155257d5afc7 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2018:1652-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-10995 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6438 · Nota de Segurança
• https://lists.suse.com/pipermail/sle-security-updates/2018-June/004181.html · Nota
• https://suse.com/security/cve/CVE-2020-12693 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-10995 · Aviso do Fabricante
• https://bugzilla.suse.com/1153095 · Nota
• https://osv.dev/vulnerability/DLA-1437-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-4781-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7033 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10030 · Nota de Segurança
• https://suse.com/security/cve/CVE-2019-19728 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2020:0434-1 · Aviso do Fabricante