NetSight
IP …
high7.2

CVE-2009-2084

Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the s…

Impact

Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the slurmd daemon or (2) strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges.

Affected products

VendorProductAffected versions
LlnlSlurm
through 1.3.13
Versions 1.2, 1.3, 1.3.1, 1.3.2, 1.3.3

Weakness classification

CWE-255

References