Database/Container, Kubernetes & orchestration
Slurm: RPC buffer overflow in the PMIx MPI plugin
CVSS 9.8CVE-2020-27745Container, Kubernetes & orchestrationcurated
Impact
RPC buffer overflow in the PMIx MPI plugin
Who can reach it
Any user who can submit a job
What to do
Upgrade Slurm; restart slurmctld and slurmd. Draining a Slurm partition means killing running training jobs
References
Related entries
- Slurm: Incorrect access control leading to privilege escalationCVE-2022-29502 · SlurmCritical
- Slurm: SQL injection against the SlurmDBD accounting databaseCVE-2023-49934 · SlurmCritical
- Slurm: Double free allowing denial of service or possibly arbitrary code executionCVE-2023-49937 · SlurmCritical
- Slurm: Environment mishandling in PrologSlurmctld/EpilogSlurmctld gives remote code execution as SlurmUserCVE-2021-31215 · SlurmHigh
- Slurm: Incorrect access control leading to information disclosure across users' jobsCVE-2022-29500 · SlurmHigh
- Slurm: Incorrect access control leading to privilege escalation and code executionCVE-2022-29501 · SlurmHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.