CVE-2020-27746
libpam-slurm: Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for...
CVE-2020-27746 is fixed in 19 products on 1 platform, first by libpam-slurm 17.11.2-1ubuntu0.1~esm4, released May 12, 2021. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0083
57th percentile
Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libpam-slurm · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | libpam-slurm 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| libpam-slurm · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | libpam-slurm 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| libpam-slurm-adopt · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | libpam-slurm-adopt 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| libpmi0 · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | libpmi0 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| libpmi0 · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | libpmi0 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| libpmi2-0 · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | libpmi2-0 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| libpmi2-0 · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | libpmi2-0 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| libslurm-perl · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | libslurm-perl 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| libslurm-perl · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | libslurm-perl 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| libslurm32 · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | libslurm32 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| libslurm34 · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | libslurm34 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| libslurmdb-perl · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | libslurmdb-perl 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| libslurmdb-perl · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | libslurmdb-perl 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| libslurmdb32 · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | libslurmdb32 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| slurm-client · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | slurm-client 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| slurm-client · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | slurm-client 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| slurm-client-emulator · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | slurm-client-emulator 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| slurm-client-emulator · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | slurm-client-emulator 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| slurm-wlm · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | slurm-wlm 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| slurm-wlm · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | slurm-wlm 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| slurm-wlm-basic-plugins · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | slurm-wlm-basic-plugins 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| slurm-wlm-basic-plugins · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | slurm-wlm-basic-plugins 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| slurm-wlm-emulator · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | slurm-wlm-emulator 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| slurm-wlm-emulator · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | slurm-wlm-emulator 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| slurm-wlm-torque · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | slurm-wlm-torque 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| slurm-wlm-torque · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | slurm-wlm-torque 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| slurmctld · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | slurmctld 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| slurmctld · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | slurmctld 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| slurmd · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | slurmd 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| slurmd · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | slurmd 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| slurmdbd · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | slurmdbd 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| slurmdbd · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | slurmdbd 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
| sview · Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm4 | sview 17.11.2-1ubuntu0.1~esm4 | May 12, 2021 |
| sview · Ubuntu 20.04 LTS (focal) | 19.05.5-1ubuntu0.1~esm1 | sview 19.05.5-1ubuntu0.1~esm1 | May 12, 2021 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.