CVE-2018-7033 SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD.
CriticalCVSS 9.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schedmd slurm | < 17.02.10.0 | 17.02.10.0 |
| schedmd slurm | >= 17.11.0.0, < 17.11.5.0 | 17.11.5.0 |
| schedmd slurm | = 17.11.0.0-pre1 | No fix listed |
| schedmd slurm | = 17.11.0.0-pre2 | No fix listed |
| schedmd slurm | = 17.11.0.0-rc1 | No fix listed |
| schedmd slurm | = 17.11.0.0-rc2 | No fix listed |
| schedmd slurm | = 17.11.0.0-rc3 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
References
- [debian-lts-announce] 20180428 [SECURITY] [DLA 1367-1] slurm-llnl security update mailing-list third-party-advisory
- [debian-lts-announce] 20180721 [SECURITY] [DLA 1437-1] slurm-llnl security update mailing-list third-party-advisory
- lists.schedmd.com mailing-list mitigation patch release-notes vendor-advisory
- DSA-4254 third-party-advisory vendor-advisory
- www.schedmd.com vendor-advisory