Vulnerability · Published Nov 3, 2023 · Assigned by mitre
CVE-2023-41914
High 7.0
In plain English
A high-severity security flaw in the slurm-wlm package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.0High
Exploit odds (30 days)0.2%top 91.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | slurm-wlm | 22.05.8-4+deb12u1 | DEBIAN-CVE-2023-41914 |
| Debian:12 | slurm-wlm | 22.05.8-4+deb12u1 | DSA-5529-1 |
| Debian:13 | slurm-wlm | 23.02.6-1 | DEBIAN-CVE-2023-41914 |
| Debian:14 | slurm-wlm | 23.02.6-1 | DEBIAN-CVE-2023-41914 |