Vulnerability · Published Dec 14, 2023 · Assigned by mitre
CVE-2023-49936
High 7.5
In plain English
A high-severity security flaw in the slurm-wlm package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.1%top 33.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | slurm-wlm | 22.05.8-4+deb12u2 | DSA-5609-1 |
| Debian:12 | slurm-wlm | 22.05.8-4+deb12u2 | DEBIAN-CVE-2023-49936 |
| Debian:13 | slurm-wlm | 23.11.3-1 | DEBIAN-CVE-2023-49936 |
| Debian:14 | slurm-wlm | 23.11.3-1 | DEBIAN-CVE-2023-49936 |
| Ubuntu:25.10 | slurm-wlm | no fix listed | UBUNTU-CVE-2023-49936 |
| Ubuntu:26.04:LTS | slurm-wlm | no fix listed | UBUNTU-CVE-2023-49936 |
| Ubuntu:26.10 | slurm-wlm | no fix listed | UBUNTU-CVE-2023-49936 |
Affected products (as reported)
References
- https://www.schedmd.com/security-archive.php
- https://lists.schedmd.com/pipermail/slurm-announce/2023/000103.html
- FEDORA-2023-9a74d212f8 vendor-advisory
- FEDORA-2023-540de58d84 vendor-advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO/