CVE-2018-7033
libpam-slurm: SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD.
CVE-2018-7033 is fixed in 17 products on 1 platform, first by libpam-slurm 17.11.2-1ubuntu0.1~esm3, released January 31, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0188
79th percentile
SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libpam-slurm · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libpam-slurm 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| libpmi0 · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libpmi0 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| libpmi2-0 · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libpmi2-0 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| libslurm-perl · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libslurm-perl 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| libslurm32 · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libslurm32 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| libslurmdb-perl · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libslurmdb-perl 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| libslurmdb32 · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | libslurmdb32 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurm-client · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurm-client 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurm-client-emulator · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurm-client-emulator 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurm-wlm · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurm-wlm 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurm-wlm-basic-plugins · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurm-wlm-basic-plugins 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurm-wlm-emulator · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurm-wlm-emulator 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurm-wlm-torque · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurm-wlm-torque 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurmctld · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurmctld 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurmd · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurmd 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| slurmdbd · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | slurmdbd 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |
| sview · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | sview 17.11.2-1ubuntu0.1~esm3 | Jan 31, 2019 |