SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-417587a4b9 advisory.

    Automatic update for slurm-21.08.8-1.fc37.

    ##### **Changelog**

    ```
    * Thu May  5 2022 Carl George <carl@george.computer> - 21.08.8-1
    - Update to 21.08.8, resolves: rhbz#2082276
    - Fix CVE-2022-29500, resolves: rhbz#2082286
    - Fix CVE-2022-29501, resolves: rhbz#2082289
    - Fix CVE-2022-29502, resolves: rhbz#2082293

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6a9dc1d46b advisory.

    Automatic update for slurm-22.05.6-1.fc38.

    ##### **Changelog**

    ```
    * Sun Nov 27 2022 Philip Kovacs <pkfed@fedoraproject.org> - 22.05.6-1
    - Update to 22.05.6 (#2131112)
    - Update deprecated vars in slurm.conf (#2133159)
    * Tue Sep  6 2022 Philip Kovacs <pkfed@fedoraproject.org> - 22.05.3-2
    - Add slurm to epel9 (#2072632); update spec for epel 7/8/9
    - Use * Mon Nov 28 2022 Fedora Project - 22.05.6-1.fc38
    - local build macro; add changelog file
    * Mon Sep  5 2022 Philip Kovacs <pkfed@fedoraproject.org> - 22.05.3-1
    - Update to 22.05.3
    - Thanks Cristian Le (fedora@lecris.me) for his contributions
    * Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 21.08.8-4
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
    * Mon May 30 2022 Jitka Plesnikova <jplesnik@redhat.com> - 21.08.8-3
    - Perl 5.36 rebuild
    * Mon May  9 2022 Philip Kovacs <pkfed@fedoraproject.org> - 21.08.8-2
    - Update to 21.08.8-2 (upstream re-release)
    * Thu May  5 2022 Carl George <carl@george.computer> - 21.08.8-1
    - Update to 21.08.8, resolves: rhbz#2082276
    - Fix CVE-2022-29500, resolves: rhbz#2082286
    - Fix CVE-2022-29501, resolves: rhbz#2082289
    - Fix CVE-2022-29502, resolves: rhbz#2082293
    * Sat Apr  2 2022 Philip Kovacs <pkfed@fedoraproject.org> - 21.08.6-1
    - Update to 21.08.6
    * Sat Jan 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 21.08.5-2
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
    * Fri Jan 14 2022 Philip Kovacs <pkfed@fedoraproject.org> - 21.08.5-1
    - Update to 21.08.5
    * Sun Nov 21 2021 Orion Poplawski <orion@nwra.com> - 21.08.4-2
    - Rebuild for hdf5 1.12.1
    * Wed Nov 17 2021 Philip Kovacs <pkfed@fedoraproject.org> - 21.08.4-1
    - Update to 21.08.4
    - Closes security issue CVE-2021-43337
    * Sun Oct 31 2021 Philip Kovacs <pkfed@fedoraproject.org> - 21.08.2-2
    - Correct log rotation problems (#2016683, #2018508)
    * Fri Oct  8 2021 Philip Kovacs <pkfed@fedoraproject.org> - 21.08.2-1
    - Update to 21.08.2
    - Added Fedora patches to support pmix v4
    - Remove slurm-pmi(-devel) subpackages
    * Tue Aug 10 2021 Orion Poplawski <orion@nwra.com> - 20.11.8-4
    - Rebuild for hdf5 1.10.7
    * Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 20.11.8-3
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
    * Sat Jul 10 2021 Bjrn Esser <besser82@fedoraproject.org> - 20.11.8-2
    - Rebuild for versioned symbols in json-c
    * Sat Jul  3 2021 Philip Kovacs <pkfed@fedoraproject.org> - 20.11.8-1
    - Update to 20.11.8
    * Tue May 25 2021 Jitka Plesnikova <jplesnik@redhat.com> - 20.11.7-4
    - Perl 5.34 re-rebuild updated packages
    * Mon May 24 2021 Philip Kovacs <pkfed@fedoraproject.org> - 20.11.7-3
    - Move auth_jwt.so plugin to base package (#1947878)
    * Fri May 21 2021 Jitka Plesnikova <jplesnik@redhat.com> - 20.11.7-2
    - Perl 5.34 rebuild
    * Sat May 15 2021 Philip Kovacs <pkfed@fedoraproject.org> - 20.11.7-1
    - Update to 20.11.7
    - Closes security issue CVE-2021-31215
    * Tue May  4 2021 Philip Kovacs <pkfed@fedoraproject.org> - 20.11.6-1
    - Release of 20.11.6
    * Mon Apr 12 2021 Philip Kovacs <pkfed@fedoraproject.org> - 20.11.5-2
    - Add subpackage slurm-slurmrestd (Slurm REST API daemon)
    * Fri Mar 26 2021 Philip Kovacs <pkfed@fedoraproject.org> - 20.11.5-1
    - Release of 20.11.5
    * Tue Mar  2 2021 Zbigniew Jdrzejewski-Szmek <zbyszek@in.waw.pl> - 20.11.3-3
    - Rebuilt for updated systemd-rpm-macros       See https://pagure.io/fesco/issue/2583.
    * Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 20.11.3-2
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
    * Tue Jan 19 2021 Philip Kovacs <pkfed@fedoraproject.org> - 20.11.3-1
    - Release of 20.11.3
    * Wed Jan  6 2021 Philip Kovacs <pkfed@fedoraproject.org> - 20.11.2-2
    - Minor spec adjustments
    * Tue Jan  5 2021 Philip Kovacs <pkfed@fedoraproject.org> - 20.11.2-1
    - Release of 20.11.2

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6458-1 advisory.

    It was discovered that Slurm did not properly handle credential management, which could allow an     unprivileged user to impersonate the SlurmUser account. An attacker could possibly use this issue to     execute arbitrary code as the root user. (CVE-2022-29500)

    It was discovered that Slurm did not properly handle access control when dealing with RPC traffic through     PMI2 and PMIx, which could allow an unprivileged user to send data to an arbitrary unix socket in the     host. An attacker could possibly use this issue to execute arbitrary code as the root user.
    (CVE-2022-29501)

    It was discovered that Slurm did not properly handle validation logic when processing input and output     data with the srun client, which could lead to the interception of process I/O. An attacker could possibly     use this issue to expose sensitive information or execute arbitrary code. This issue only affected Ubuntu     22.04 LTS. (CVE-2022-29502)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
211435	Fedora 37 : slurm (2022-417587a4b9)	Nessus	Fedora Local Security Checks	critical
211087	Fedora 38 : slurm (2022-6a9dc1d46b)	Nessus	Fedora Local Security Checks	critical
184019	Ubuntu 20.04 ESM / 22.04 ESM : Slurm vulnerabilities (USN-6458-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2022-29502

critical

Tenable Plugins

critical

critical

critical