CVE-2023-49938
Debian Security Advisory 5609-1
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an attacker can modified their extended group list that is used with the sbcast subsystem, and open files with an unauthorized set of extended groups. The fixed versions are 22.05.11 and 23.02.7.
Se descubrió un problema en SchedMD Slurm 22.05.x y 23.02.x. Hay un control de acceso incorrecto: un atacante puede modificar su lista de grupos extendidos que se usa con el subsistema sbcast y abrir archivos con un conjunto no autorizado de grupos extendidos. Las versiones fijas son 22.05.11 y 23.02.7.
Several vulnerabilities were discovered in the Slurm Workload Manager, a cluster resource management and job scheduling system, which may result in privilege escalation, denial of service, bypass of message hash checks or opening files with an incorrect set of extended groups.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-12-03 CVE Reserved
- 2023-12-14 CVE Published
- 2024-08-02 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (4)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schedmd Search vendor "Schedmd" | Slurm Search vendor "Schedmd" for product "Slurm" | >= 22.05.0 < 22.05.11 Search vendor "Schedmd" for product "Slurm" and version " >= 22.05.0 < 22.05.11" | - |
Affected
| ||||||
| Schedmd Search vendor "Schedmd" | Slurm Search vendor "Schedmd" for product "Slurm" | >= 23.02.0 < 23.02.7 Search vendor "Schedmd" for product "Slurm" and version " >= 23.02.0 < 23.02.7" | - |
Affected
| ||||||