Skip to content
OpenAdvisories
Unscored CVE-2019-19727 EUVD-2019-9329GHSA-wmqm-x8vm-v6mh

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.

Published Jan 13, 2020 · Updated Aug 5, 2024 · Assigned by mitre

Description

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS slurm-llnl No fix yet —
Ubuntu Pro 16.04 LTS slurm-llnl No fix yet —
Ubuntu Pro 14.04 LTS slurm-llnl No fix yet —
ReleasePackageFixed inAdvisory
SLES 15 SP1 pdsh 2.33-7.6.1 SUSE-SU-2020:0443-1
SLES 15 SP1 slurm 17.11.13-6.23.1 SUSE-SU-2020:2602-1, SUSE-SU-2020:0228-1, SUSE-SU-2020:0110-1
SLES 15 pdsh 2.33-7.6.1 SUSE-SU-2020:0443-1
SLES 15 slurm 17.11.13-6.23.1 SUSE-SU-2020:0228-1
SLES 15 slurm_18_08 18.08.9-1.5.2 SUSE-SU-2020:0443-1
SLES 12 pdsh 2.33-7.18.1 SUSE-SU-2021:0773-1, SUSE-SU-2020:0434-1
SLES 12 pdsh_slurm_18_08 +1 2.34-7.26.2 SUSE-SU-2021:0773-1, SUSE-SU-2020:2607-1
SLES 12 pdsh_slurm_20_11 2.34-7.32.1 SUSE-SU-2021:0773-1
SLES 12 slurm 17.02.11-6.44.1 SUSE-SU-2020:2601-1
SLES 12 slurm_18_08 18.08.9-3.5.1 SUSE-SU-2020:0434-1
SLES 12 slurm_20_02 20.02.3-3.5.1 SUSE-SU-2020:2607-1
SLES 12 slurm_20_11 20.11.4-3.5.1 SUSE-SU-2021:0773-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLE HPC 15 slurm 17.11.13-6.31.1 SUSE-SU-2020:2602-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed slurm 21.08.1-1.1 openSUSE-SU-2024:11389-1
openSUSE Leap 15.1 slurm 18.08.9-lp151.2.6.1 openSUSE-SU-2020:0085-1

Advisories 10

References