CVE-2017-15566 Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog....
HighCVSS 7.8
EPSS 0.58%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schedmd slurm | < 16.05.11 | 16.05.11 |
| schedmd slurm | >= 17.02.0, < 17.2.09 | 17.2.09 |
| schedmd slurm | = 17.11.0-rc1 | No fix listed |
References
- 101675 third-party-advisory vdb-entry
- DSA-4023 third-party-advisory vendor-advisory
- www.schedmd.com vendor-advisory