CVE-2021-31215

ALTO 8.8CVE-2021-31215 · Published 13/05/2021 · updated 17/06/2026

In breve

CVE-2021-31215 è una vulnerabilità ALTO (CVSS 8.8) che riguarda slurm (schedmd).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.9%, superiore al 87.0% delle vulnerabilità.
Correzione: aggiornare a 20.11.7, 20.02.7 o successiva.

Package	Affected versions	Patched versions
slurm schedmd	`≥ 20.11, < 20.11.7< 20.02.7`	`20.11.720.02.7`

Description

SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling.

References

lists.debian.org/debian-lts-announce/2022/01/msg00011.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ODMJQNY4FAV7G3DSKVIO5KY7Q7DKBPU
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PRHTASFAU5FNB2MJOG67YID2ONQS5MCQ
lists.schedmd.com/pipermail/slurm-announce/2021/000055.html · Vendor Advisory
schedmd.com/news.php · Release Notes

Altre vulnerabilità di slurm

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

slurm

schedmd

≥ 20.11, < 20.11.7< 20.02.7

20.11.720.02.7

Altre vulnerabilità di slurm

Vedi tutto →