Database/Container, Kubernetes & orchestration
Slurm: Race condition in message aggregation allows launching a process as another user
CVSS 8.1CVE-2020-12693Container, Kubernetes & orchestrationcurated
Impact
Race condition in message aggregation allows launching a process as another user
Who can reach it
Any user who can submit a job
What to do
Upgrade Slurm
References
Related entries
- Slurm: Improper message-integrity enforcement allows RPC traffic modificationCVE-2023-49933 · SlurmHigh
- Slurm: Filesystem race conditions allow gaining ownership of, overwriting, or deleting filesCVE-2023-41914 · SlurmHigh
- Slurm: Authentication-handling mistake in stepmgr lets an attacker execute processes under other users' jobsCVE-2024-48936 · SlurmMedium
- Slurm: RPC buffer overflow in the PMIx MPI pluginCVE-2020-27745 · SlurmCritical
- Slurm: Incorrect access control leading to privilege escalationCVE-2022-29502 · SlurmCritical
- Slurm: SQL injection against the SlurmDBD accounting databaseCVE-2023-49934 · SlurmCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.