Security Update for slurm-llnl Package (DLA-1367-1)
Summary
DLA-1367-1: slurm-llnl - security update. Affects slurm-llnl versions < 2.3.4-2+deb7u2. Fixed in 2.3.4-2+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The slurm-llnl package is a job scheduler and resource manager for high-performance computing (HPC) clusters. It is designed to efficiently allocate resources and manage workload distribution across a cluster. This package is commonly used in scientific and research environments.
Vulnerability Detail
The slurm-llnl package is affected by a security vulnerability identified as CVE-2018-7033. This vulnerability allows an attacker to execute arbitrary code with the privileges of the Slurm controller daemon. Exploiting this vulnerability could lead to unauthorized access, data manipulation, or disruption of the cluster's functionality.
How To Fix
Minimum fixed version
2.3.4-2+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade slurm-llnlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The slurm-llnl package is vulnerable to a security issue (CVE-2018-7033) that allows for arbitrary code execution. It is recommended to update the package to version 2.3.4-2+deb7u2 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for slurm-llnl →
FAQ
This vulnerability allows an attacker to execute arbitrary code with the privileges of the Slurm controller daemon, potentially leading to unauthorized access, data manipulation, or disruption of the cluster's functionality.
Users of the slurm-llnl package on Debian 7 systems are affected by this vulnerability.
There are no known exploits for this vulnerability at the time of this advisory.
Yes, a fix is available in version 2.3.4-2+deb7u2 or later of the slurm-llnl package.
You can update the slurm-llnl package using the package manager of the Debian 7 operating system.
Related vulnerabilities
Recent vulnerabilities recorded for slurm-llnl.
