Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8: MGASA-2021-0253 Critical: Slurm Remote Code Execution

mageia
Calendar Grey June 13, 2021
Dist Mageia Esm H88
The newly released Slurm updates for Mageia address a critical RCE vulnerability that impacted various versions disclosed in June 2021.
SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSlurmctld or EpilogSlurmctld script leads...

Summary

SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling (CVE-2021-31215).

References

- https://bugs.mageia.org/show_bug.cgi?id=29040

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/3ODMJQNY4FAV7G3DSKVIO5KY7Q7DKBPU/

- https://www.cve.org/CVERecord?id=CVE-2021-31215

Topics%20covered

Topics Covered

security advisory security issue critical remote code execution Mageia Slurm

Resolution

SRPMS

- 8/core/slurm-20.11.7-1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 13 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0253.html
Type: security
CVE: CVE-2021-31215

Topics%20covered

Topics Covered

security advisory security issue critical remote code execution Mageia Slurm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here