CVE-2018-10995
slurm-client: SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (...
CVE-2018-10995 is fixed in 17 products on 1 platform, first by libpam-slurm 17.11.2-1ubuntu0.1~esm3, released January 31, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0171
77th percentile
SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields).
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libpam-slurm · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libpam-slurm 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| libpmi0 · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libpmi0 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| libpmi2-0 · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libpmi2-0 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| libslurm-perl · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libslurm-perl 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| libslurm32 · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libslurm32 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| libslurmdb-perl · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libslurmdb-perl 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| libslurmdb32 · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libslurmdb32 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurm-client · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurm-client 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurm-client-emulator · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurm-client-emulator 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurm-wlm · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurm-wlm 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurm-wlm-basic-plugins · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurm-wlm-basic-plugins 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurm-wlm-emulator · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurm-wlm-emulator 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurm-wlm-torque · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurm-wlm-torque 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurmctld · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurmctld 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurmd · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurmd 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurmdbd · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurmdbd 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| sview · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | sview 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.