Log in Start free

Vulnerability · Published Dec 14, 2023 · Assigned by mitre

CVE-2023-49937

Critical 9.8

In plain English

A critical-severity security flaw in the slurm-wlm package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)1.4%top 27.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a denial of service or possibly execute arbitrary code. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12slurm-wlm22.05.8-4+deb12u2DEBIAN-CVE-2023-49937
Debian:12slurm-wlm22.05.8-4+deb12u2DSA-5609-1
Debian:13slurm-wlm23.11.3-1DEBIAN-CVE-2023-49937
Debian:14slurm-wlm23.11.3-1DEBIAN-CVE-2023-49937

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References