CVE-2018-7033 – Ubuntu Security Notice USN-4781-2

https://notcve.org/view.php?id=CVE-2018-7033

15 Mar 2018 — SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD. SchedMD Slurm en versiones anteriores a la 17.02.10 y 17.11.x en versiones anteriores a la 17.11.5 permite ataques de inyección SQL contra SlurmDBD. USN-4781-1 fixed several vulnerabilities in Slurm. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. It was discovered that Slurm incorrectly handled certain messages between the daemon and the user. • https://lists.debian.org/debian-lts-announce/2018/04/msg00032.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •