PT-2022-20640 · Opensuse+1 · Slurm+1

Johannes Segitz · Published 2022-09-07 · Updated 2023-06-22 · CVE-2022-31251

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions openSUSE Factory slurm versions prior to 22.05.2-3.3

Description A vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root.

Recommendations For openSUSE Factory slurm versions prior to 22.05.2-3.3, update to version 22.05.2-3.3 or later to resolve the issue.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2022-31251

OPENSUSE-SU-2022_3462-1

OPENSUSE-SU-2022_3468-1

OPENSUSE-SU-2022_3490-1

OPENSUSE-SU-2022_3491-1

OPENSUSE-SU-2022_3535-1

OPENSUSE-SU-2024:12225-1

SUSE-RU-2022:4297-1

SUSE-RU-2022:4348-1

SUSE-RU-2022:4361-1

SUSE-RU-2022:4362-1

SUSE-SU-2022:3454-1

SUSE-SU-2022:3462-1

SUSE-SU-2022:3468-1

SUSE-SU-2022:3477-1

SUSE-SU-2022:3490-1

SUSE-SU-2022:3491-1

SUSE-SU-2022:3497-1

SUSE-SU-2022:3535-1

Affected Products

Suse

Slurm

References · 42

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=1201674 · Exploit
• https://osv.dev/vulnerability/SUSE-RU-2022:4297-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3497-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3491-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-31251 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3462-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3468-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-RU-2022:4362-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-RU-2022:4361-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-31251 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3454-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-31251 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31251 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:3535-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-31251 · Security Note