high8.8
CVE-2022-29501
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges and code execution.
Impact
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges and code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schedmd | Slurm | before 20.11.9 from 21.08.0 before 21.08.08 |
| Fedoraproject | Fedora | Versions 34, 35, 36 |
| Debian | Debian Linux | Version 11.0 |
References
- NVD record
- CVE.org record
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXLOI3ERTKMZR2KWNRN7OR5S55VPWENH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y6B7OWVNVCJUDE6VDWGCBUWMRCRETAO3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YBI4NFDGGMBKWG4EMSZL5UHATDCLPCQW/
- https://lists.schedmd.com/pipermail/slurm-announce/
- https://www.debian.org/security/2022/dsa-5166
- https://www.schedmd.com/news.php
- https://www.schedmd.com/news.php?id=260
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXLOI3ERTKMZR2KWNRN7OR5S55VPWENH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y6B7OWVNVCJUDE6VDWGCBUWMRCRETAO3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YBI4NFDGGMBKWG4EMSZL5UHATDCLPCQW/
- https://lists.schedmd.com/pipermail/slurm-announce/
- https://www.debian.org/security/2022/dsa-5166
- https://www.schedmd.com/news.php
- https://www.schedmd.com/news.php?id=260