# CVE-2018-10995: slurm-client: SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (...

CVE-2018-10995 is fixed in 17 products on 1 platform, first by libpam-slurm 17.11.2-1ubuntu0.1~esm3, released January 31, 2019. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-10995
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0171
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 30, 2018

## Description

SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields).

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libpam-slurm Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [libpam-slurm 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpam-slurm-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | libpmi0 Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [libpmi0 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpmi0-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | libpmi2-0 Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [libpmi2-0 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpmi2-0-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | libslurm-perl Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [libslurm-perl 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libslurm-perl-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | libslurm32 Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [libslurm32 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libslurm32-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | libslurmdb-perl Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [libslurmdb-perl 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libslurmdb-perl-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | libslurmdb32 Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [libslurmdb32 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libslurmdb32-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | slurm-client Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [slurm-client 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-slurm-client-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | slurm-client-emulator Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [slurm-client-emulator 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-slurm-client-emulator-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | slurm-wlm Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [slurm-wlm 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-slurm-wlm-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | slurm-wlm-basic-plugins Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [slurm-wlm-basic-plugins 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-slurm-wlm-basic-plugins-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | slurm-wlm-emulator Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [slurm-wlm-emulator 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-slurm-wlm-emulator-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | slurm-wlm-torque Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [slurm-wlm-torque 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-slurm-wlm-torque-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | slurmctld Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [slurmctld 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-slurmctld-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | slurmd Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [slurmd 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-slurmd-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | slurmdbd Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [slurmdbd 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-slurmdbd-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |
| Linux | sview Ubuntu 18.04.6 LTS (bionic) | 17.11.2-1ubuntu0.1~esm3 | [sview 17.11.2-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-sview-17.11.2-1ubuntu0.1-esm3.md) | Jan 31, 2019 |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.