CVE-2023-49933
14.12.2023, 05:15
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.Enginsight
| Vendor | Product | Version |
|---|---|---|
| schedmd | slurm | 22.05 ≤ 𝑥 < 22.05.12 |
| schedmd | slurm | 23.02 ≤ 𝑥 < 23.02.7 |
| schedmd | slurm | 23.11 |
| schedmd | slurm | 23.11:rc1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References